{"action":"Upgrade zsh to 5.8-r0 or later.","affected":[{"fixed":"5.8-r0","introduced":"0"}],"component":"zsh","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.14","exploited":false,"fixed_versions":["5.8-r0"],"id":"tcs_01M5NBM3ED37P2MYEJSGHCV5VD","modified_at":"2026-09-21T06:17:52.510838894Z","published_at":"2020-02-24T14:15:11.667Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-20044","https://security.alpinelinux.org/vuln/CVE-2019-20044"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-20044#Alpine:v3.14/zsh","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-20044"}],"summary":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by e"}