—
GO-2022-0558
Privilege escalation in github.com/containers/psgo
Quick fix
GO-2022-0558 — github.com/containers/psgo: upgrade to the fixed version with the command below.
go get github.com/containers/psgo@v1.7.2Details
The psgo package executes the 'nsenter' binary, potentially allowing privilege escalation when used in environments where nsenter is provided by an untrusted source.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/containers/psgo
Introduced in:
0Fixed in: 1.7.2Fix
go get github.com/containers/psgo@v1.7.2