{"action":"Upgrade github.com/opencontainers/runc to 1.1.14 or later.","affected":[{"fixed":"1.1.14","introduced":"0"},{"fixed":"1.2.0-rc.3","introduced":"1.2.0-rc.1"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2024-45310"],"ecosystem":"Go","epss":0.00317,"exploited":false,"fixed_versions":["1.1.14","1.2.0-rc.3"],"ghsa_id":"GHSA-jfvp-7x6p-h2pv","id":"tcs_01M5KG57YRXM2XMJSJRJACN7CK","modified_at":"2026-02-04T02:23:26.560077Z","published_at":"2024-09-06T20:43:50Z","references":["https://osv.dev/vulnerability/GO-2024-3110","https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv","https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7","https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3e","https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accf","https://github.com/opencontainers/runc/pull/4359"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3110","url":"https://osv.dev/vulnerability/GO-2024-3110"}],"summary":"Can be confused to create empty files/directories on the host in github.com/opencontainers/runc"}