{"action":"Upgrade github.com/quay/claircore to 0.4.8 or later.","affected":[{"fixed":"0.4.8","introduced":"0"},{"fixed":"1.1.0","introduced":"1.0.0"},{"fixed":"0.5.5","introduced":"0.5.0"}],"component":"github.com/quay/claircore","cve_ids":["CVE-2021-3762"],"ecosystem":"Go","epss":0.04815,"exploited":false,"fixed_versions":["0.4.8","1.1.0","0.5.5"],"ghsa_id":"GHSA-mq47-6wwv-v79w","id":"tcs_01M5KFG5ZMFVFED37AFSMW58M6","modified_at":"2023-11-08T04:06:18.944877Z","published_at":"2022-03-04T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-mq47-6wwv-v79w","https://nvd.nist.gov/vuln/detail/CVE-2021-3762","https://github.com/quay/clair/pull/1379","https://github.com/quay/clair/pull/1380","https://github.com/quay/claircore/pull/478","https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821","https://github.com/quay/claircore/commit/dff671c665141f126c072de8a744855d4916c9c7","https://github.com/quay/claircore/commit/ed5f52aec1c82746725e9cc23e98316eab8be25a","https://bugzilla.redhat.com/show_bug.cgi?id=2000795","https://github.com/quay/claircore","https://github.com/quay/claircore/commits/v0.4.8","https://github.com/quay/claircore/commits/v0.5.5","https://github.com/quay/claircore/commits/v1.1.0","https://pkg.go.dev/vuln/GO-2022-0346","https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-mq47-6wwv-v79w","url":"https://osv.dev/vulnerability/GHSA-mq47-6wwv-v79w"}],"summary":"Path traversal in claircore"}