{"action":"Upgrade github.com/containers/buildah to 1.27.1 or later.","affected":[{"fixed":"1.27.1","introduced":"0"}],"component":"github.com/containers/buildah","cve_ids":["CVE-2022-2990"],"ecosystem":"Go","epss":0.00349,"exploited":false,"fixed_versions":["1.27.1"],"ghsa_id":"GHSA-fjm8-m7m6-2fjp","id":"tcs_01M5KFXK07RC05DD1QR6YS7H3S","modified_at":"2026-02-04T03:25:59.994205Z","published_at":"2022-09-21T15:06:10Z","references":["https://osv.dev/vulnerability/GO-2022-1008","https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/","https://github.com/containers/buildah/commit/4a8bf740e862f2438279c6feee2ea59ddf0cda0b"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1008","url":"https://osv.dev/vulnerability/GO-2022-1008"}],"summary":"Unauthorized file access in github.com/containers/buildah"}