{"action":"Upgrade github.com/opencontainers/runc to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"1.0.0-rc95"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2023-27561"],"ecosystem":"Go","epss":0.00448,"exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-vpvm-3wq2-2wvm","id":"tcs_01M5KFYTRVZGJNX28QEKGV2MJJ","modified_at":"2026-02-04T03:58:42.107712Z","published_at":"2024-08-20T20:29:14Z","references":["https://osv.dev/vulnerability/GO-2023-1627","https://github.com/advisories/GHSA-vpvm-3wq2-2wvm","https://github.com/opencontainers/runc/pull/3785","https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334","https://github.com/opencontainers/runc/issues/3751","https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9","https://github.com/opencontainers/runc/releases/tag/v1.1.5","https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1627","url":"https://osv.dev/vulnerability/GO-2023-1627"}],"summary":"Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc"}