{"action":"Upgrade github.com/openshift/source-to-image to 1.1.10-0.20180427153919-f5cbcbc5cc6f or later.","affected":[{"fixed":"1.1.10-0.20180427153919-f5cbcbc5cc6f","introduced":"0"}],"component":"github.com/openshift/source-to-image","cve_ids":["CVE-2018-1103"],"ecosystem":"Go","epss":0.01338,"exploited":false,"fixed_versions":["1.1.10-0.20180427153919-f5cbcbc5cc6f"],"ghsa_id":"GHSA-w55j-f7vx-6q37","id":"tcs_01M5KFQ5G3PKQ9CCG81EV4KC7E","modified_at":"2023-11-08T03:59:45.036679Z","published_at":"2023-02-06T23:49:46Z","references":["https://osv.dev/vulnerability/GHSA-w55j-f7vx-6q37","https://nvd.nist.gov/vuln/detail/CVE-2018-1103","https://github.com/openshift/source-to-image/pull/870","https://github.com/openshift/source-to-image/commit/f5cbcbc5cc6f8cc2f479a7302443bea407a700cb","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1103","https://github.com/openshift/source-to-image","https://github.com/snyk/zip-slip-vulnerability","https://hansmi.ch/articles/2018-04-openshift-s2i-security","https://pkg.go.dev/vuln/GO-2020-0026","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-w55j-f7vx-6q37","url":"https://osv.dev/vulnerability/GHSA-w55j-f7vx-6q37"}],"summary":"Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)"}