{"action":"Upgrade github.com/opencontainers/image-spec to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"github.com/opencontainers/image-spec","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-77vh-xpmg-72qh","id":"tcs_01M5KF1JRHE2VRWFDR8CNFWDKW","modified_at":"2026-09-10T03:49:09.703536006Z","published_at":"2021-11-18T16:02:41Z","references":["https://osv.dev/vulnerability/GHSA-77vh-xpmg-72qh","https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m","https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh","https://github.com/opencontainers/image-spec/commit/693428a734f5bab1a84bd2f990d92ef1111cd60c","https://github.com/opencontainers/image-spec","https://github.com/opencontainers/image-spec/releases/tag/v1.0.2"],"severity":{"label":"low","score":3},"sources":[{"source":"osv","source_id":"GHSA-77vh-xpmg-72qh","url":"https://osv.dev/vulnerability/GHSA-77vh-xpmg-72qh"}],"summary":"Clarify `mediaType` handling"}