{"action":"Upgrade github.com/moby/moby to 17.12.0-ce or later.","affected":[{"fixed":"17.12.0-ce","introduced":"0"}],"component":"github.com/moby/moby","cve_ids":["CVE-2017-16539"],"ecosystem":"Go","epss":0.01829,"exploited":false,"fixed_versions":["17.12.0-ce"],"ghsa_id":"GHSA-vfjc-2qcw-j95j","id":"tcs_01M5KFP0YG6HWFC8ADPVVVNJPN","modified_at":"2026-02-03T03:03:49.377697Z","published_at":"2022-05-17T00:21:35Z","references":["https://osv.dev/vulnerability/GHSA-vfjc-2qcw-j95j","https://nvd.nist.gov/vuln/detail/CVE-2017-16539","https://github.com/moby/moby/pull/35399","https://github.com/moby/moby/commit/a21ecdf3c8a343a7c94e4c4d01b178c87ca7aaa1","https://github.com/moby/moby","https://marc.info/?l=linux-scsi&m=150985062200941&w=2","https://marc.info/?l=linux-scsi&m=150985455801444&w=2","https://twitter.com/ewindisch/status/926443521820774401"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-vfjc-2qcw-j95j","url":"https://osv.dev/vulnerability/GHSA-vfjc-2qcw-j95j"}],"summary":"Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)"}