{"action":"Upgrade github.com/canonical/pebble to 1.1.1 or later.","affected":[{"fixed":"1.4.2","introduced":"1.2.0"},{"fixed":"1.7.3","introduced":"1.5.0"},{"fixed":"1.10.2","introduced":"1.8.0"},{"fixed":"1.1.1","introduced":"0"}],"component":"github.com/canonical/pebble","cve_ids":["CVE-2024-3250"],"ecosystem":"Go","epss":0.00203,"exploited":false,"fixed_versions":["1.4.2","1.7.3","1.10.2","1.1.1"],"ghsa_id":"GHSA-4685-2x5r-65pj","id":"tcs_01M5KEW0G23Q68BAA0VWV3RMK9","modified_at":"2026-07-08T07:14:04.726081802Z","published_at":"2024-04-05T15:03:03Z","references":["https://osv.dev/vulnerability/GHSA-4685-2x5r-65pj","https://github.com/canonical/pebble/security/advisories/GHSA-4685-2x5r-65pj","https://nvd.nist.gov/vuln/detail/CVE-2024-3250","https://github.com/canonical/pebble/pull/406","https://github.com/canonical/pebble/commit/4ca343d3889533143477e21c63867f2f3c3b5645","https://github.com/canonical/pebble/commit/a5f6f062a11ea156697b854264385ff7e1985fd8","https://github.com/canonical/pebble/commit/b8abd1ff0090f3e0749e81eb1fc3ea16ba95f514","https://github.com/canonical/pebble/commit/cd326225b9b0be067da7d8858e2c912078cbbbd5","https://github.com/canonical/pebble","https://www.cve.org/CVERecord?id=CVE-2024-3250"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4685-2x5r-65pj","url":"https://osv.dev/vulnerability/GHSA-4685-2x5r-65pj"}],"summary":"Pebble service manager's file pull API allows access by any user"}