{"action":"Upgrade github.com/canonical/pebble to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"},{"fixed":"1.4.2","introduced":"1.2.0"},{"fixed":"1.7.3","introduced":"1.5.0"},{"fixed":"1.10.2","introduced":"1.8.0"}],"component":"github.com/canonical/pebble","cve_ids":["CVE-2024-3250"],"ecosystem":"Go","epss":0.00201,"exploited":false,"fixed_versions":["1.1.1","1.4.2","1.7.3","1.10.2"],"ghsa_id":"GHSA-4685-2x5r-65pj","id":"tcs_01M5KG25QW16Q0963JCHAMMFM5","modified_at":"2026-03-03T04:55:13.243282Z","published_at":"2024-06-04T15:19:21Z","references":["https://osv.dev/vulnerability/GO-2024-2692","https://github.com/canonical/pebble/security/advisories/GHSA-4685-2x5r-65pj","https://nvd.nist.gov/vuln/detail/CVE-2024-3250","https://www.cve.org/CVERecord?id=CVE-2024-3250","https://github.com/canonical/pebble/commit/4ca343d3889533143477e21c63867f2f3c3b5645","https://github.com/canonical/pebble/commit/a5f6f062a11ea156697b854264385ff7e1985fd8","https://github.com/canonical/pebble/commit/b8abd1ff0090f3e0749e81eb1fc3ea16ba95f514","https://github.com/canonical/pebble/commit/cd326225b9b0be067da7d8858e2c912078cbbbd5","https://github.com/canonical/pebble/pull/406"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2692","url":"https://osv.dev/vulnerability/GO-2024-2692"}],"summary":"Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble"}