Go/github.com/fluid-cloudnative/fluid CVE-2023-51699: unknown, EPSS 0.61%
Fluid vulnerable to OS Command Injection for Fluid Users with JuicefsRuntime in github.com/fluid-cloudnative/fluid
Action: Upgrade github.com/fluid-cloudnative/fluid to 0.9.3 or later.
go get github.com/fluid-cloudnative/fluid@v0.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.3 | - |
Fixed versions
| 0.9.3 |
Sources
- osv: GO-2024-2644
- https://github.com/fluid-cloudnative/fluid/security/advisories/GHSA-wx8q-4gm9-rj2g
- https://nvd.nist.gov/vuln/detail/CVE-2023-51699
- https://github.com/fluid-cloudnative/fluid/commit/02b7cd8b79a26092df95d625664994bda485c722
- https://github.com/fluid-cloudnative/fluid/commit/e0184cff8790ad000c3e8943392c7f544fad7d66
CVE-2023-51699 · published · modified · JSON