{"action":"Upgrade github.com/nuclio/nuclio to 1.16.5 or later.","affected":[{"fixed":"1.16.5","introduced":"0"}],"component":"github.com/nuclio/nuclio","cve_ids":["CVE-2026-52833"],"ecosystem":"Go","epss":0.00552,"exploited":false,"fixed_versions":["1.16.5"],"ghsa_id":"GHSA-3v79-m2cg-89ww","id":"tcs_01M5KEVB4N64S0Z327DCX5KA20","modified_at":"2026-07-21T19:18:54.329479600Z","published_at":"2026-07-16T19:40:53Z","references":["https://osv.dev/vulnerability/GHSA-3v79-m2cg-89ww","https://github.com/nuclio/nuclio/security/advisories/GHSA-3v79-m2cg-89ww","https://github.com/nuclio/nuclio/pull/4149","https://github.com/nuclio/nuclio/commit/4c78040c759068e927f3ed7c6507543c15d4ae56","https://github.com/nuclio/nuclio","https://github.com/nuclio/nuclio/releases/tag/1.16.5"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-3v79-m2cg-89ww","url":"https://osv.dev/vulnerability/GHSA-3v79-m2cg-89ww"}],"summary":"Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE"}