{"action":"Upgrade github.com/kata-containers/runtime to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"},{"fixed":"1.10.6","introduced":"1.10.0"},{"fixed":"1.11.1","introduced":"1.11.0"}],"component":"github.com/kata-containers/runtime","cve_ids":["CVE-2020-2026"],"ecosystem":"Go","epss":0.00475,"exploited":false,"fixed_versions":["1.9.1","1.10.6","1.11.1"],"ghsa_id":"GHSA-877x-32pm-p28x","id":"tcs_01M5KF39YGJXHXJRYH6T55QZ6J","modified_at":"2023-11-08T04:02:48.383045Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-877x-32pm-p28x","https://nvd.nist.gov/vuln/detail/CVE-2020-2026","https://github.com/kata-containers/runtime/issues/2712","https://github.com/kata-containers/runtime/pull/2713","https://github.com/kata-containers/runtime/releases/tag/1.10.5","https://github.com/kata-containers/runtime/releases/tag/1.11.1","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P7FHA4AF6Y6PAVJBTTQPUEHXZQUOF3P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6JPBKAQBF3OR72N55GWM2TDYQP2OHK6H","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6W5MKF7HSAIL2AX2BX6RV4WWVGUIKVLS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJAMOVB7DSOGX7J26QH5HZKU7GSSX2VU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNJHSSPCKUGJDVXXIXK2JUWCRJDQX7CE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWACJQSMY5BVDMVTF3FBN7HZSOSFOG3Q"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-877x-32pm-p28x","url":"https://osv.dev/vulnerability/GHSA-877x-32pm-p28x"}],"summary":"Link Following in Kata Runtime"}