CVE-2024-3154 Cri-o: arbitrary command injection via pod annotation

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "1.27.5",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "1.27.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.28.5",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "1.28.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.29.3",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "1.29.4",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "1.30.0",
        "versionType": "semver"
      }
    ],
    "packageName": "cri-o",
    "collectionURL": "https://github.com/cri-o/cri-o",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.25.5-16.2.rhaos4.12.gitcb09013.el8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8",
      "cpe:/a:redhat:openshift:4.12::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.26.5-16.2.rhaos4.13.git67e2a9d.el9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el9",
      "cpe:/a:redhat:openshift:4.13::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.27.6-2.rhaos4.14.gitb3bd0bf.el9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.6-2.rhaos4.15.git77bbb1c.el8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9",
      "cpe:/a:redhat:openshift:4.15::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 3.11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift:3.11"
    ]
  }
]