{"action":"Upgrade firejail to 0.9.44.6-1 or later.","affected":[{"fixed":"0.9.44.6-1","introduced":"0"}],"component":"firejail","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.9.44.6-1"],"id":"tcs_01M5NCG4DDYNGA82667DJBKBX4","modified_at":"2026-09-01T20:03:48.704512852Z","published_at":"2017-02-09T18:59:00.160Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-5940","https://security-tracker.debian.org/tracker/CVE-2017-5940"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-5940#Debian:13/firejail","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-5940"}],"summary":"Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows loca"}