CVE-2024-3727
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
- CVSS 3.1
- 8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-25)
- CWE
- CWE-354
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6wvf-f2vw-3425 | Go | github.com/containers/image | <5.30.1 | 5.30.1 |
| GHSA-6wvf-f2vw-3425 | Go | github.com/containers/image/v5 | >=5.30.0 <5.30.1 | 5.30.1 |
| GHSA-6wvf-f2vw-3425 | Go | github.com/containers/image/v5 | <5.29.3 | 5.29.3 |
| GO-2024-2842 | Go | github.com/containers/image/v5 | <5.29.3 >=5.30.0 <5.30.1 | 5.29.3, 5.30.1 |