id: GO-2025-3424
modules:
    - module: github.com/Xe/x
      non_go_versions:
        - fixed: 1.11.0-37-gd98d70a
      vulnerable_at: 1.11.0
summary: |-
    Anubis has a bot protection bypass when a sophisticated attacker asks to pass a
    challenge of difficulty 0 in github.com/Xe/x
cves:
    - CVE-2025-24369
references:
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-24369
    - fix: https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b
    - fix: https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02
    - web: https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f
    - web: https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f
source:
    id: CVE-2025-24369
    created: 2025-01-28T17:11:12.050051-05:00
review_status: UNREVIEWED