---
title: "Security digest: July 30, 2024"
url: https://erroneo.us/security/2024-07-30/
description: "July 30, 2024 vulnerability digest: 1 CISA KEV addition (VMware); 2 critical advisories (Go). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2024-07-30
date_modified: 2024-07-30
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: July 30, 2024

1 known exploited (cisa kev) addition and 2 critical advisories.

## Take stock

- Do you run any of these? VMware ESXi. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-08-20.
- Go: 2 critical advisories ( github.com/prest/prest , github.com/docker/docker ). Check with govulncheck ./... .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2024-37085](https://erroneo.us/security/cve/CVE-2024-37085/index.md) VMware ESXi: VMware ESXi Authentication Bypass Vulnerability (CISA due 2024-08-20)

## Critical advisories

- [GHSA-wm25-j4gw-6vr3](https://erroneo.us/security/ghsa/GHSA-wm25-j4gw-6vr3/index.md) pREST vulnerable to jwt bypass + sql injection — Go github.com/prest/prest < 1.5.4 → 1.5.4
- [CVE-2024-41110](https://erroneo.us/security/cve/CVE-2024-41110/index.md) Authz zero length regression — Go github.com/docker/docker >= 24.0.0, < 25.0.6 → 25.0.6; Go github.com/docker/docker >= 19.03.0, < 23.0.15 → 23.0.15; Go github.com/docker/docker >= 26.0.0, < 26.1.5 → 26.1.5

---
Source page: https://erroneo.us/security/2024-07-30/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt