{"action":"Upgrade cloud-init to 18.3-6 or later.","affected":[{"fixed":"18.3-6","introduced":"0"}],"component":"cloud-init","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["18.3-6"],"id":"tcs_01M5NDKKBNH30AVPDKDHN5QGW2","modified_at":"2026-09-21T07:00:05.637527149Z","published_at":"2019-04-09T03:29:00.937Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-0816","https://security-tracker.debian.org/tracker/CVE-2019-0816"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-0816#Debian:13/cloud-init","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-0816"}],"summary":"A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerabili"}