{"action":"Upgrade github.com/containers/buildah to 1.24.7 or later.","affected":[{"fixed":"1.35.1","introduced":"1.35.0"},{"fixed":"1.34.3","introduced":"1.34.0"},{"fixed":"1.33.7","introduced":"1.33.0"},{"fixed":"1.27.4","introduced":"1.25.0"},{"fixed":"1.24.7","introduced":"1.24.0"},{"fixed":"1.29.3","introduced":"1.28.0"},{"fixed":"1.31.5","introduced":"1.30.0"},{"fixed":"1.32.3","introduced":"1.32.0"}],"component":"github.com/containers/buildah","cve_ids":["CVE-2024-1753"],"ecosystem":"Go","epss":0.00457,"exploited":false,"fixed_versions":["1.35.1","1.34.3","1.33.7","1.27.4","1.24.7","1.29.3","1.31.5","1.32.3"],"ghsa_id":"GHSA-pmf3-c36m-g5cf","id":"tcs_01M5KFHJBR9K7GRYTD2GG1C719","modified_at":"2026-09-10T03:50:10.694645137Z","published_at":"2024-03-19T20:06:52Z","references":["https://osv.dev/vulnerability/GHSA-pmf3-c36m-g5cf","https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf","https://nvd.nist.gov/vuln/detail/CVE-2024-1753","https://github.com/containers/buildah/commit/3deda19137f5dec0285bbb832bd93c22d860b087","https://github.com/containers/buildah/commit/9de9c20ff368beb84b84fe660773d352519dc1c5","https://github.com/containers/buildah/commit/a030f7b8cd373075affef1f86de43a87e502f3d8","https://bugzilla.redhat.com/show_bug.cgi?id=2265513","https://github.com/containers/buildah"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-pmf3-c36m-g5cf","url":"https://osv.dev/vulnerability/GHSA-pmf3-c36m-g5cf"}],"summary":"Container escape at build time"}