{"action":"Upgrade github.com/juju/juju to 0.0.0-20260120044552-26ff93c903d5 or later.","affected":[{"introduced":"0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2025-68153"],"ecosystem":"Go","epss":0.00232,"exploited":false,"fixed_versions":["0.0.0-20260120044552-26ff93c903d5"],"ghsa_id":"GHSA-245v-p8fj-vwm2","id":"tcs_01M5KERC254CVTTDVYP829S21P","modified_at":"2026-05-05T15:59:18.394794Z","published_at":"2026-04-03T18:29:54Z","references":["https://osv.dev/vulnerability/GHSA-245v-p8fj-vwm2","https://github.com/juju/juju/security/advisories/GHSA-245v-p8fj-vwm2","https://nvd.nist.gov/vuln/detail/CVE-2025-68153","https://github.com/juju/juju/commit/26ff93c903d55b0712c6fb3f6b254710edb971d4","https://github.com/juju/juju"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-245v-p8fj-vwm2","url":"https://osv.dev/vulnerability/GHSA-245v-p8fj-vwm2"}],"summary":"Juju has a resource poisoning vulnerability"}