{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.1.0-rc1","last_affected":"4.4.1"}],"component":"github.com/containers/podman/v4","cve_ids":["CVE-2022-4123"],"ecosystem":"Go","epss":0.00244,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rprg-4v7q-87v7","id":"tcs_01M5KFN419TAXPFWJ7SW2SX33F","modified_at":"2024-05-20T21:38:32Z","published_at":"2022-12-08T18:30:50Z","references":["https://osv.dev/vulnerability/GHSA-rprg-4v7q-87v7","https://nvd.nist.gov/vuln/detail/CVE-2022-4123","https://github.com/containers/podman/issues/13293","https://github.com/containers/podman/pull/13531","https://github.com/containers/podman/commit/7934b77dd5372c22063686a218b8b48c2fcaca8c","https://bugzilla.redhat.com/show_bug.cgi?id=2144989","https://github.com/containers/podman","https://pkg.go.dev/vuln/GO-2022-1159"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-rprg-4v7q-87v7","url":"https://osv.dev/vulnerability/GHSA-rprg-4v7q-87v7"}],"summary":"Buildah (as part of Podman) vulnerable to Path Traversal"}