{"action":"Upgrade podman to 5.2.5-r0 or later.","affected":[{"fixed":"5.2.5-r0","introduced":"0"}],"component":"podman","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.20","exploited":false,"fixed_versions":["5.2.5-r0"],"id":"tcs_01M6H4KT4AS2YFAQ9QGTV2DQ4Q","modified_at":"2026-11-03T06:32:58.297468373Z","published_at":"2024-10-09T15:15:17.837Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-9675","https://security.alpinelinux.org/vuln/CVE-2024-9675"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-9675#Alpine:v3.20/podman","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-9675"}],"summary":"A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to"}