{"action":"Upgrade github.com/juju/juju to 0.0.0-20260120044552-26ff93c903d5 or later.","affected":[{"introduced":"0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2025-68153"],"ecosystem":"Go","epss":0.00236,"exploited":false,"fixed_versions":["0.0.0-20260120044552-26ff93c903d5"],"ghsa_id":"GHSA-245v-p8fj-vwm2","id":"tcs_01M5KGH0BKBK17YQ0QEGEP9N6H","modified_at":"2026-04-06T18:17:46.337768Z","published_at":"2026-04-06T17:49:05Z","references":["https://osv.dev/vulnerability/GO-2026-4924","https://github.com/juju/juju/security/advisories/GHSA-245v-p8fj-vwm2","https://github.com/juju/juju/commit/26ff93c903d55b0712c6fb3f6b254710edb971d4"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2026-4924","url":"https://osv.dev/vulnerability/GO-2026-4924"},{"source":"nvd","source_id":"CVE-2025-68153","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68153"}],"summary":"Juju has a resource poisoning vulnerability in github.com/juju/juju"}