{"action":"Upgrade github.com/opencontainers/runc to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"1.0.0-rc95"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2023-27561"],"ecosystem":"Go","epss":0.00448,"exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-vpvm-3wq2-2wvm","id":"tcs_01M5KFPG2T8ZKSXRAZ6706S7E6","modified_at":"2026-09-10T03:49:57.004964556Z","published_at":"2023-03-03T21:30:19Z","references":["https://osv.dev/vulnerability/GHSA-vpvm-3wq2-2wvm","https://nvd.nist.gov/vuln/detail/CVE-2023-27561","https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334","https://github.com/opencontainers/runc/issues/3751","https://github.com/opencontainers/runc/pull/3785","https://security.netapp.com/advisory/ntap-20241206-0004","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN","https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html","https://github.com/opencontainers/runc/releases/tag/v1.1.5","https://github.com/opencontainers/runc","https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-vpvm-3wq2-2wvm","url":"https://osv.dev/vulnerability/GHSA-vpvm-3wq2-2wvm"}],"summary":"Opencontainers runc Incorrect Authorization vulnerability"}