{"action":"Upgrade github.com/kubevirt/csi-driver to 0.0.0-202403081943-cc28dcbb0afc14 or later.","affected":[{"introduced":"0"}],"component":"github.com/kubevirt/csi-driver","cve_ids":["CVE-2024-1725"],"ecosystem":"Go","epss":0.00631,"exploited":false,"fixed_versions":["0.0.0-202403081943-cc28dcbb0afc14"],"ghsa_id":"GHSA-fg9q-5cw2-p6r9","id":"tcs_01M5KF94YDG36KYW4EDFZEEZG0","modified_at":"2025-03-14T19:54:12Z","published_at":"2024-03-07T21:30:21Z","references":["https://osv.dev/vulnerability/GHSA-fg9q-5cw2-p6r9","https://nvd.nist.gov/vuln/detail/CVE-2024-1725","https://github.com/kubevirt/csi-driver/commit/cc28dcbb0afca0a7cb8a73bc998ab49f864ed560","https://access.redhat.com/errata/RHSA-2024:1559","https://access.redhat.com/errata/RHSA-2024:1891","https://access.redhat.com/errata/RHSA-2024:2047","https://access.redhat.com/security/cve/CVE-2024-1725","https://bugzilla.redhat.com/show_bug.cgi?id=2265398","https://github.com/kubevirt/csi-driver","https://pkg.go.dev/vuln/GO-2025-3512"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-fg9q-5cw2-p6r9","url":"https://osv.dev/vulnerability/GHSA-fg9q-5cw2-p6r9"}],"summary":"kubevirt-csi: PersistentVolume allows access to HCP's root node"}