CVE-2024-24790: Affected software stdlib 1.21.5 present in the version of go this project is using

[razor54]

Hello there,
I was using EC2 instances with ECS, and when doing vulnerability scans I found this CVE on:

• /var/lib/ecs/deps/execute-command/bin/3.2.2303.0/ssm-agent-worker
• /var/lib/ecs/deps/execute-command/bin/3.2.2303.0/ssm-session-worker

According to the CVE references the go version should be updated.

cpe:2.3:a:golang:go::::::::   Show Matching CPE(s)	Up to (excluding)1.21.11
cpe:2.3:a:golang:go::::::::   Show Matching CPE(s)	From (including)1.22.0