{"action":"Upgrade github.com/opencontainers/runc to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"0"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2023-25809"],"ecosystem":"Go","epss":0.00319,"exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-m8cg-xc2p-r3fc","id":"tcs_01M5KFYZS4B248SFGN83SE4DZP","modified_at":"2026-02-04T02:59:23.815900Z","published_at":"2024-08-20T20:29:17Z","references":["https://osv.dev/vulnerability/GO-2023-1682","https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc","https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1682","url":"https://osv.dev/vulnerability/GO-2023-1682"}],"summary":"Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc"}