{"action":"Upgrade nitro-tpm-pcr-compute to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"nitro-tpm-pcr-compute","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-xrv8-2pf5-f3q7","id":"tcs_01M5KF4YHGTA7B7F7K7P2ZV4X8","modified_at":"2025-12-05T19:09:38.158008Z","published_at":"2025-12-05T18:57:55Z","references":["https://osv.dev/vulnerability/GHSA-xrv8-2pf5-f3q7","https://github.com/aws/nitrotpm-attestation-samples/security/advisories/GHSA-xrv8-2pf5-f3q7","https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/attestable-ami.html","https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html","https://github.com/aws/NitroTPM-Tools","https://github.com/aws/NitroTPM-Tools/blob/main/CHANGELOG.md","https://github.com/aws/NitroTPM-Tools/releases/tag/v1.1.0","https://github.com/aws/nitrotpm-attestation-samples","https://www.freedesktop.org/software/systemd/man/latest/systemd-stub.html"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-xrv8-2pf5-f3q7","url":"https://osv.dev/vulnerability/GHSA-xrv8-2pf5-f3q7"}],"summary":"nitro-tpm-pcr-compute may allow kernel command line modification by an account operator"}