| id: GO-2025-3762 |
| modules: |
| - module: github.com/ubuntu/authd |
| versions: |
| - fixed: 0.5.4 |
| vulnerable_at: 0.5.3 |
| summary: New authd users logging in via SSH are members of the root group in github.com/ubuntu/authd |
| cves: |
| - CVE-2025-5689 |
| ghsas: |
| - GHSA-g8qw-mgjx-rwjr |
| references: |
| - advisory: https://github.com/ubuntu/authd/security/advisories/GHSA-g8qw-mgjx-rwjr |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-5689 |
| - fix: https://github.com/ubuntu/authd/commit/619ce8e55953b970f1765ddaad565081538151ab |
| source: |
| id: GHSA-g8qw-mgjx-rwjr |
| created: 2025-07-21T17:09:00.23399162Z |
| review_status: UNREVIEWED |
