{"action":"Upgrade buildah to 1.14.4-r0 or later.","affected":[{"fixed":"1.14.4-r0","introduced":"0"}],"component":"buildah","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["1.14.4-r0"],"id":"tcs_01M6GSNWVHE49DWHD2GAW3H2W0","modified_at":"2026-11-03T06:32:35.850954749Z","published_at":"2020-03-31T22:15:14.667Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-10696","https://security.alpinelinux.org/vuln/CVE-2020-10696"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-10696#Alpine:v3.18/buildah","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-10696"}],"summary":"A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write"}