{"action":"Upgrade github.com/canonical/lxd to 0.0.0-20240118092008-ce1bd0dd37bb or later.","affected":[{"fixed":"5.20.0","introduced":"5.19.0"},{"fixed":"0.0.0-20240118092008-ce1bd0dd37bb","introduced":"0.0.0-20230920084527-cbe39c5d3f14"}],"component":"github.com/canonical/lxd","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["5.20.0","0.0.0-20240118092008-ce1bd0dd37bb"],"ghsa_id":"GHSA-x9qq-236j-gj97","id":"tcs_01M5KFRYVEKYRFNV75RCK7S6QS","modified_at":"2025-07-22T14:57:33Z","published_at":"2023-12-05T23:32:58Z","references":["https://osv.dev/vulnerability/GHSA-x9qq-236j-gj97","https://github.com/canonical/lxd/security/advisories/GHSA-x9qq-236j-gj97","https://github.com/canonical/lxd/issues/12606","https://github.com/canonical/lxd/commit/ce1bd0dd37bb3810fe6f16c237a4b65257f231f1","https://github.com/canonical/lxd"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-x9qq-236j-gj97","url":"https://osv.dev/vulnerability/GHSA-x9qq-236j-gj97"}],"summary":"Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true"}