{"action":"Upgrade github.com/containers/storage to 1.28.1 or later.","affected":[{"fixed":"1.28.1","introduced":"0"}],"component":"github.com/containers/storage","cve_ids":["CVE-2021-20291"],"ecosystem":"Go","epss":0.01587,"exploited":false,"fixed_versions":["1.28.1"],"ghsa_id":"GHSA-7qw8-847f-pggm","id":"tcs_01M5KF2HNJZRET2ZZQDA5FX3YP","modified_at":"2023-11-08T04:04:36.808520Z","published_at":"2021-05-10T19:35:07Z","references":["https://osv.dev/vulnerability/GHSA-7qw8-847f-pggm","https://nvd.nist.gov/vuln/detail/CVE-2021-20291","https://github.com/containers/storage/pull/860","https://github.com/containers/storage/commit/306fcabc964470e4b3b87a43a8f6b7d698209ee1","https://bugzilla.redhat.com/show_bug.cgi?id=1939485","https://github.com/containers/storage","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM","https://pkg.go.dev/vuln/GO-2021-0100","https://unit42.paloaltonetworks.com/cve-2021-20291"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-7qw8-847f-pggm","url":"https://osv.dev/vulnerability/GHSA-7qw8-847f-pggm"}],"summary":"Improper Locking in github.com/containers/storage"}