{"action":"Upgrade github.com/containerd/imgcrypt to 1.1.4 or later.","affected":[{"fixed":"1.1.4","introduced":"0"}],"component":"github.com/containerd/imgcrypt","cve_ids":["CVE-2022-24778"],"ecosystem":"Go","epss":0.02718,"exploited":false,"fixed_versions":["1.1.4"],"ghsa_id":"GHSA-8v99-48m9-c8pm","id":"tcs_01M5KFTR8T8DCZZ4KH23DW5H3H","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-04-28T23:35:11Z","references":["https://osv.dev/vulnerability/GO-2021-0412","https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9","https://github.com/containerd/imgcrypt/issues/69","https://github.com/containerd/imgcrypt/releases/tag/v1.1.4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0412","url":"https://osv.dev/vulnerability/GO-2021-0412"}],"summary":"Incorrect authorization in github.com/containerd/imgcrypt"}