{"action":"Upgrade booth to 1.0-268-gdce51f9-1 or later.","affected":[{"fixed":"1.0-268-gdce51f9-1","introduced":"0"}],"component":"booth","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.0-268-gdce51f9-1"],"id":"tcs_01M5NGJXKH8BHCYCESM02S4FBX","modified_at":"2026-10-15T08:02:21.545348028Z","published_at":"2022-07-28T15:15:07.663Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-2553","https://security-tracker.debian.org/tracker/CVE-2022-2553"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-2553#Debian:14/booth","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-2553"}],"summary":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are"}