id: GO-2024-2449
modules:
    - module: github.com/gravitational/teleport
      non_go_versions:
        - fixed: 12.4.31
        - introduced: 13.0.0
        - fixed: 13.4.13
        - introduced: 14.0.0
        - fixed: 14.2.4
      vulnerable_at: 3.2.17+incompatible
summary: |-
    Withdrawn Advisory: User-provided environment values allow execution on macOS
    agents in github.com/gravitational/teleport
withdrawn: "2024-01-23T12:49:53Z"
ghsas:
    - GHSA-vfxf-76hv-v4w4
references:
    - advisory: https://github.com/gravitational/teleport/security/advisories/GHSA-vfxf-76hv-v4w4
    - fix: https://github.com/gravitational/teleport/commit/fcc97de9f99dfec8696ecfd620672a26f29cf9ac
    - fix: https://github.com/gravitational/teleport/pull/36132
source:
    id: GHSA-vfxf-76hv-v4w4
    created: 2024-08-16T15:59:25.038667-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE