{"action":"Upgrade cri-o to 1.26.2-r0 or later.","affected":[{"fixed":"1.26.2-r0","introduced":"0"}],"component":"cri-o","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["1.26.2-r0"],"id":"tcs_01M6HKGXEG5V75KMX9WAPTHA9P","modified_at":"2026-11-03T07:31:26.107307300Z","published_at":"2023-09-25T20:15:10.590Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2022-4318","https://security.alpinelinux.org/vuln/CVE-2022-4318"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2022-4318#Alpine:v3.23/cri-o","url":"https://osv.dev/vulnerability/ALPINE-CVE-2022-4318"}],"summary":"A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable."}