{"action":"Upgrade github.com/containers/buildah to 1.43.2 or later.","affected":[{"fixed":"1.43.2","introduced":"1.38.1"}],"component":"github.com/containers/buildah","cve_ids":["CVE-2026-44517"],"ecosystem":"Go","epss":0.00184,"exploited":false,"fixed_versions":["1.43.2"],"ghsa_id":"GHSA-49p4-px3h-rq49","id":"tcs_01M5KEWA1TD8QNHQRQ9RS16MH5","modified_at":"2026-07-27T17:11:40.032962202Z","published_at":"2026-06-22T20:15:48Z","references":["https://osv.dev/vulnerability/GHSA-49p4-px3h-rq49","https://github.com/containers/buildah/security/advisories/GHSA-49p4-px3h-rq49","https://github.com/podman-container-tools/buildah/security/advisories/GHSA-49p4-px3h-rq49","https://github.com/podman-container-tools/buildah"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-49p4-px3h-rq49","url":"https://osv.dev/vulnerability/GHSA-49p4-px3h-rq49"}],"summary":"Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive"}