Go/github.com/containers/buildah CVE-2024-9675: medium 4.4, EPSS 0.39%
Buildah allows arbitrary directory mount in github.com/containers/buildah
Action: Upgrade github.com/containers/buildah to 1.37.1 or later.
go get github.com/containers/buildah@v1.37.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.37.1 | - |
Fixed versions
| 1.37.1 |
Sources
- osv: GO-2024-3186
- nvd: CVE-2024-9675
- https://github.com/advisories/GHSA-586p-749j-fhwp
- https://github.com/containers/buildah/commit/aa67e5d71ee7ec07122a210baa3b13966a9e086c
CVE-2024-9675 · published · modified · JSON