High severity7.5GHSA Advisory· Published Aug 1, 2024· Updated Jun 17, 2026

CVE-2024-41265

Description

A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/cortexproject/cortexGo	<= 0.42.1	—

Affected products

Cortexproject/CortexGHSA
Range: <= 0.42.1
ghsa-coords3 versions
pkg:golang/github.com/cortexproject/cortex pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
<= 0.42.1+ 2 more
- (no CPE)range: <= 0.42.1
- (no CPE)range: < 0.0.20251230T014957-150000.1.134.1
- (no CPE)range: < 0.0.20260723T184607-160000.1.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-vw7g-3cc7-7rmhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-41265ghsaADVISORY
gist.github.com/nyxfqq/1a8237f3f9cf793c6433f08b17d1593cnvdWEB
pkg.go.dev/vuln/GO-2024-3036ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000