{"action":"Upgrade github.com/containerd/imgcrypt to 1.1.4 or later.","affected":[{"fixed":"1.1.4","introduced":"0"}],"component":"github.com/containerd/imgcrypt","cve_ids":["CVE-2022-24778"],"ecosystem":"Go","epss":0.02718,"exploited":false,"fixed_versions":["1.1.4"],"ghsa_id":"GHSA-8v99-48m9-c8pm","id":"tcs_01M5KF4DJZ6AKKM64JS7HJPKAT","modified_at":"2024-05-20T20:48:13Z","published_at":"2022-03-28T19:33:44Z","references":["https://osv.dev/vulnerability/GHSA-8v99-48m9-c8pm","https://github.com/containerd/imgcrypt/security/advisories/GHSA-8v99-48m9-c8pm","https://nvd.nist.gov/vuln/detail/CVE-2022-24778","https://github.com/containerd/imgcrypt/issues/69","https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9","https://github.com/containerd/imgcrypt","https://github.com/containerd/imgcrypt/releases/tag/v1.1.4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SJUNSC7YZLA745EMKWK2GKEV57GE52K","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAHAAOOA3KZJC2I5WHCR3XVBJBNWTWUE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFTJR5CR5EOYDVOSBZEMLBHLJRTPJPUA","https://pkg.go.dev/vuln/GO-2021-0412"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8v99-48m9-c8pm","url":"https://osv.dev/vulnerability/GHSA-8v99-48m9-c8pm"}],"summary":"Incorrect Authorization in imgcrypt"}