{"action":"Upgrade github.com/kata-containers/runtime to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"},{"fixed":"1.10.5","introduced":"1.10.0"},{"fixed":"1.11.1","introduced":"1.11.0"}],"component":"github.com/kata-containers/runtime","cve_ids":["CVE-2020-2023"],"ecosystem":"Go","epss":0.01149,"exploited":false,"fixed_versions":["1.9.1","1.10.5","1.11.1"],"ghsa_id":"GHSA-6978-vg2j-cc9q","id":"tcs_01M5KEZRX7QRRTQPHFWC42G82N","modified_at":"2023-11-08T04:02:48.321662Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-6978-vg2j-cc9q","https://nvd.nist.gov/vuln/detail/CVE-2020-2023","https://github.com/kata-containers/agent/issues/791","https://github.com/kata-containers/runtime/issues/2488","https://github.com/kata-containers/agent/pull/792","https://github.com/kata-containers/runtime/pull/2477","https://github.com/kata-containers/runtime/pull/2487","https://github.com/kata-containers","https://github.com/kata-containers/runtime/releases/tag/1.10.5","https://github.com/kata-containers/runtime/releases/tag/1.11.1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6978-vg2j-cc9q#Go/github.com/kata-containers/runtime","url":"https://osv.dev/vulnerability/GHSA-6978-vg2j-cc9q"}],"summary":"Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers"}