{"action":"Upgrade github.com/moby/sys/user to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"github.com/moby/sys/user","cve_ids":["CVE-2026-61801"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-mjcv-p78q-w5fw","id":"tcs_01M5JJ2Z0GR8VJHA4TM6DA6390","modified_at":"2026-10-19T21:31:35.458679290Z","published_at":"2026-10-19T21:08:21Z","references":["https://osv.dev/vulnerability/GO-2026-6686","https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw","https://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe","https://github.com/moby/sys/pull/221"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GO-2026-6686","url":"https://osv.dev/vulnerability/GO-2026-6686"},{"source":"nvd","source_id":"CVE-2026-61801","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61801"}],"summary":"Possible DoS via unbounded parsing of user and group database files in github.com/moby/sys/user"}