{"action":"Upgrade github.com/juju/juju to 2.9.38 or later.","affected":[{"fixed":"2.9.38","introduced":"2.9.22"},{"fixed":"3.0.3","introduced":"3.0.0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2023-0092"],"ecosystem":"Go","epss":0.00627,"exploited":false,"fixed_versions":["2.9.38","3.0.3"],"ghsa_id":"GHSA-x5rv-w9pm-8qp8","id":"tcs_01M5KFRMG46KN2K9QAC38771JC","modified_at":"2025-02-07T20:45:09Z","published_at":"2023-03-01T19:17:17Z","references":["https://osv.dev/vulnerability/GHSA-x5rv-w9pm-8qp8","https://github.com/juju/juju/security/advisories/GHSA-x5rv-w9pm-8qp8","https://nvd.nist.gov/vuln/detail/CVE-2023-0092","https://github.com/juju/juju/commit/ef803e2a13692d355b784b7da8b4b1f01dab1556","https://bugs.launchpad.net/juju/+bug/1999622","https://github.com/advisories/GHSA-x5rv-w9pm-8qp8","https://github.com/juju/juju"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-x5rv-w9pm-8qp8","url":"https://osv.dev/vulnerability/GHSA-x5rv-w9pm-8qp8"}],"summary":"Juju controller - Arbitrary file reading vulnerability"}