{"action":"Upgrade github.com/containers/image to 5.30.1 or later.","affected":[{"fixed":"5.30.1","introduced":"0"}],"component":"github.com/containers/image","cve_ids":["CVE-2024-3727"],"ecosystem":"Go","epss":0.01279,"exploited":false,"fixed_versions":["5.30.1"],"ghsa_id":"GHSA-6wvf-f2vw-3425","id":"tcs_01M5KF0ZBTZYRZ21ZBVBERNYSS","modified_at":"2026-09-10T03:50:13.395116265Z","published_at":"2024-05-14T18:30:52Z","references":["https://osv.dev/vulnerability/GHSA-6wvf-f2vw-3425","https://nvd.nist.gov/vuln/detail/CVE-2024-3727","https://github.com/containers/image/commit/132678b47bae29c710589012668cb85859d88385","https://github.com/containers/image/commit/e8948046055060605bd68289d406ce149590c33a","https://access.redhat.com/errata/RHSA-2024:0045","https://access.redhat.com/errata/RHSA-2024:9098","https://access.redhat.com/errata/RHSA-2024:9102","https://access.redhat.com/errata/RHSA-2024:9960","https://access.redhat.com/security/cve/CVE-2024-3727","https://bugzilla.redhat.com/show_bug.cgi?id=2274767","https://github.com/advisories/GHSA-6wvf-f2vw-3425","https://github.com/containers/image","https://github.com/containers/image/releases/tag/v5.29.3","https://github.com/containers/image/releases/tag/v5.30.1","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN","https://access.redhat.com/errata/RHSA-2024:3718","https://access.redhat.com/errata/RHSA-2024:4159","https://access.redhat.com/errata/RHSA-2024:4613","https://access.redhat.com/errata/RHSA-2024:4850","https://access.redhat.com/errata/RHSA-2024:4960","https://access.redhat.com/errata/RHSA-2024:5258","https://access.redhat.com/errata/RHSA-2024:5951","https://access.redhat.com/errata/RHSA-2024:6054","https://access.redhat.com/errata/RHSA-2024:6122","https://access.redhat.com/errata/RHSA-2024:6708","https://access.redhat.com/errata/RHSA-2024:6818","https://access.redhat.com/errata/RHSA-2024:6824","https://access.redhat.com/errata/RHSA-2024:7164","https://access.redhat.com/errata/RHSA-2024:7174","https://access.redhat.com/errata/RHSA-2024:7182","https://access.redhat.com/errata/RHSA-2024:7187","https://access.redhat.com/errata/RHSA-2024:7922","https://access.redhat.com/errata/RHSA-2024:7941","https://access.redhat.com/errata/RHSA-2024:8260","https://access.redhat.com/errata/RHSA-2024:8425","https://access.redhat.com/errata/RHSA-2024:9097"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-6wvf-f2vw-3425","url":"https://osv.dev/vulnerability/GHSA-6wvf-f2vw-3425"}],"summary":"github.com/containers/image allows unexpected authenticated registry accesses"}