{"action":"Upgrade github.com/containers/buildah to 1.37.1 or later.","affected":[{"fixed":"1.37.1","introduced":"0"}],"component":"github.com/containers/buildah","cve_ids":["CVE-2024-9675"],"ecosystem":"Go","epss":0.00392,"exploited":false,"fixed_versions":["1.37.1"],"ghsa_id":"GHSA-586p-749j-fhwp","id":"tcs_01M5KG5KCCDNN05WGCB318837T","modified_at":"2026-02-04T02:32:53.220339Z","published_at":"2024-10-11T14:32:39Z","references":["https://osv.dev/vulnerability/GO-2024-3186","https://github.com/advisories/GHSA-586p-749j-fhwp","https://github.com/containers/buildah/commit/aa67e5d71ee7ec07122a210baa3b13966a9e086c"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GO-2024-3186","url":"https://osv.dev/vulnerability/GO-2024-3186"},{"source":"nvd","source_id":"CVE-2024-9675","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9675"}],"summary":"Buildah allows arbitrary directory mount in github.com/containers/buildah"}