{"action":"Upgrade github.com/opencontainers/distribution-spec to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"github.com/opencontainers/distribution-spec","cve_ids":["CVE-2021-41190"],"ecosystem":"Go","epss":0.02223,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-mc8v-mgrf-8f4m","id":"tcs_01M5KFFPYC01GXAZSEKS8H1C2N","modified_at":"2026-07-08T06:30:00.754362064Z","published_at":"2021-11-18T16:13:08Z","references":["https://osv.dev/vulnerability/GHSA-mc8v-mgrf-8f4m","https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m","https://nvd.nist.gov/vuln/detail/CVE-2021-41190","https://github.com/opencontainers/distribution-spec/commit/ac28cac0557bcd3084714ab09f9f2356fe504923","https://github.com/opencontainers/distribution-spec","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TUZNDAH2B26VPBK342UC3BHZNLBUXGX","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4334HT7AZPLWNYHW4ARU6JBUF3VZJPZN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A2RRFNTMFYKOTRKD37F5ANMCIO3GGJML","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DX63GRWFEI5RVMYV6XLMCG4OHPWZML27","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RZTO6N55WHKHIZI4IMLY2QFBPMVTAERM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SQBCYJUIM5GVCMFUPRWKRZNXMMI5EFA4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4OJ764CKKCWCVONHD4YXTGR7HZ7LRUV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YIGVQWOA5XXCQXEOOKZX4CDAGLBDRPRX","http://www.openwall.com/lists/oss-security/2021/11/19/10"],"severity":{"label":"low","score":3},"sources":[{"source":"osv","source_id":"GHSA-mc8v-mgrf-8f4m","url":"https://osv.dev/vulnerability/GHSA-mc8v-mgrf-8f4m"}],"summary":"Clarify Content-Type handling"}