CVE-2024-24789 Mishandling of corrupt central directory record in archive/zip

[
  {
    "vendor": "Go standard library",
    "product": "archive/zip",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "archive/zip",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.21.11",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.22.0-0",
        "lessThan": "1.22.4",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "findSignatureInBlock"
      },
      {
        "name": "NewReader"
      },
      {
        "name": "OpenReader"
      }
    ],
    "defaultStatus": "unaffected"
  }
]