{"action":"Upgrade github.com/containers/image to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"github.com/containers/image","cve_ids":["CVE-2019-10214"],"ecosystem":"Go","epss":0.01591,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-85p9-j7c9-v4gr","id":"tcs_01M5KF34GKWEND73PHTT47GWBD","modified_at":"2024-05-20T19:46:40Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-85p9-j7c9-v4gr","https://nvd.nist.gov/vuln/detail/CVE-2019-10214","https://github.com/containers/image/issues/654","https://github.com/containers/image/pull/655","https://github.com/containers/image/pull/669","https://github.com/containers/image/commit/634605d06e738aec8332bcfd69162e7509ac7aaf","https://bugzilla.redhat.com/show_bug.cgi?id=1732508","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214","https://github.com/containers/image","https://pkg.go.dev/vuln/GO-2021-0081","http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00035.html","http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-85p9-j7c9-v4gr","url":"https://osv.dev/vulnerability/GHSA-85p9-j7c9-v4gr"}],"summary":"containers/image library Insufficiently Protects Credentials"}