{"id":"GO-2026-5755","revision":"81b361544fde4219a60fb4d6c14b31e9","records":[{"revision":"81b361544fde4219a60fb4d6c14b31e9","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5755","aliases":["CVE-2026-10720","GHSA-xg3j-c7q4-f9ph"],"title":"Canonical MicroCeph: path traversal issue in the remote-import AP in github.com/canonical/microceph/microceph","description":"Canonical MicroCeph: path traversal issue in the remote-import AP in github.com/canonical/microceph/microceph","state":0,"publishedAt":"2026-06-25T22:34:41+00:00","modifiedAt":"2026-06-25T23:01:17.1782157+00:00","affected":[{"ecosystem":"Go","name":"github.com/canonical/microceph/microceph","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260609072127-5c2760d8fb76"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-xg3j-c7q4-f9ph","https://nvd.nist.gov/vuln/detail/CVE-2026-10720","https://github.com/canonical/microceph/commit/5c2760d8fb765d670e2673d3a537b67eae4b67c6","https://github.com/canonical/microceph/pull/758"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5755","license":"OSV · upstream source license applies","key":"osv:GO-2026-5755","identifiers":["GO-2026-5755","CVE-2026-10720","GHSA-xg3j-c7q4-f9ph"]},"retained":false,"historicalAffected":[]}],"coverage":[]}