id: GO-2022-0815
modules:
    - module: github.com/opencontainers/umoci
      versions:
        - fixed: 0.4.7
      vulnerable_at: 0.4.6
summary: Improper input validation in umoci in github.com/opencontainers/umoci
cves:
    - CVE-2021-29136
ghsas:
    - GHSA-9m95-8hx6-7p9v
references:
    - advisory: https://github.com/opencontainers/umoci/security/advisories/GHSA-9m95-8hx6-7p9v
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-29136
    - fix: https://github.com/opencontainers/umoci/commit/d9efc31daf2206f7d3fdb839863cf7a576a2eb57
    - web: http://www.openwall.com/lists/oss-security/2021/04/06/2
source:
    id: GHSA-9m95-8hx6-7p9v
    created: 2024-08-20T14:19:21.91395-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE