{"action":"Upgrade github.com/opencontainers/runc to 1.1.14 or later.","affected":[{"fixed":"1.1.14","introduced":"0"},{"fixed":"1.2.0-rc.3","introduced":"1.2.0-rc.1"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2024-45310"],"ecosystem":"Go","epss":0.00317,"exploited":false,"fixed_versions":["1.1.14","1.2.0-rc.3"],"ghsa_id":"GHSA-jfvp-7x6p-h2pv","id":"tcs_01M5KFE3CP4TJ8P22612W7B4DZ","modified_at":"2026-09-10T03:50:18.280094459Z","published_at":"2024-09-03T19:49:32Z","references":["https://osv.dev/vulnerability/GHSA-jfvp-7x6p-h2pv","https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv","https://nvd.nist.gov/vuln/detail/CVE-2024-45310","https://github.com/opencontainers/runc/pull/4359","https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7","https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3e","https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accf","https://github.com/opencontainers/runc","https://security.netapp.com/advisory/ntap-20250221-0008","http://www.openwall.com/lists/oss-security/2024/09/03/1"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GHSA-jfvp-7x6p-h2pv","url":"https://osv.dev/vulnerability/GHSA-jfvp-7x6p-h2pv"}],"summary":"runc can be confused to create empty files/directories on the host"}