{"action":"Upgrade sigs.k8s.io/secrets-store-csi-driver to 0.0.17 or later.","affected":[{"fixed":"0.0.17","introduced":"0.0.15"}],"component":"sigs.k8s.io/secrets-store-csi-driver","cve_ids":["CVE-2020-8568"],"ecosystem":"Go","epss":0.01328,"exploited":false,"fixed_versions":["0.0.17"],"ghsa_id":"GHSA-5cgx-vhfp-6cf9","id":"tcs_01M5KFWG0VSDKK31GYF88SFAWF","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GO-2022-0629","https://github.com/kubernetes-sigs/secrets-store-csi-driver/pull/371","https://github.com/kubernetes-sigs/secrets-store-csi-driver/commit/c2cbb19e2eef16638fa0523383788a4bc22231fd"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0629","url":"https://osv.dev/vulnerability/GO-2022-0629"}],"summary":"Directory traversal in sigs.k8s.io/secrets-store-csi-driver"}