{"action":"Upgrade github.com/NVIDIA/nvidia-container-toolkit to 1.16.2 or later.","affected":[{"fixed":"1.16.2","introduced":"0"}],"component":"github.com/NVIDIA/nvidia-container-toolkit","cve_ids":["CVE-2024-0133"],"ecosystem":"Go","epss":0.00249,"exploited":false,"fixed_versions":["1.16.2"],"ghsa_id":"GHSA-f748-7hpg-88ch","id":"tcs_01M5KF8JGAC29WDR6B22XRWCV8","modified_at":"2026-09-10T03:50:19.683101251Z","published_at":"2024-10-29T19:52:41Z","references":["https://osv.dev/vulnerability/GHSA-f748-7hpg-88ch","https://github.com/NVIDIA/libnvidia-container/security/advisories/GHSA-xff4-h7r9-vrpf","https://github.com/NVIDIA/nvidia-container-toolkit/security/advisories/GHSA-f748-7hpg-88ch","https://nvd.nist.gov/vuln/detail/CVE-2024-0133","https://advisory-inbox.githubapp.com/advisory_reviews/GHSA-wqq7-v22c-gpfp","https://github.com/NVIDIA/nvidia-container-toolkit","https://nvidia.custhelp.com/app/answers/detail/a_id/5582"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-f748-7hpg-88ch","url":"https://osv.dev/vulnerability/GHSA-f748-7hpg-88ch"}],"summary":"NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system"}