{"action":"Upgrade linux-pam to 1.5.1-r0 or later.","affected":[{"fixed":"1.5.1-r0","introduced":"1.5.0"}],"component":"linux-pam","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["1.5.1-r0"],"id":"tcs_01M5NCJ3YR2QG05A2MJ16SC10C","modified_at":"2026-10-26T11:17:55.163271128Z","published_at":"2020-12-18T00:15:14.330Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-27780","https://security.alpinelinux.org/vuln/CVE-2020-27780"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-27780#Alpine:v3.19/linux-pam","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-27780"}],"summary":"A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of a"}