{"action":"Upgrade github.com/moby/sys/user to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"github.com/moby/sys/user","cve_ids":["CVE-2026-61801"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-mjcv-p78q-w5fw","id":"tcs_01M5JJMW68XP6A36VET97T7KVN","modified_at":"2026-10-19T21:40:47.349593935Z","published_at":"2026-10-08T16:08:33Z","references":["https://osv.dev/vulnerability/GHSA-mjcv-p78q-w5fw","https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw","https://github.com/moby/sys/pull/221","https://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe","https://github.com/moby/sys"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-mjcv-p78q-w5fw","url":"https://osv.dev/vulnerability/GHSA-mjcv-p78q-w5fw"}],"summary":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files"}