Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5761
  • Go/github.com/opencontainers/runc
 Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc 07 Jul
  • Fix available
GHSA-xjvp-4fhw-gc47
  • Go/github.com/opencontainers/runc
 runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations 22 Jun
  • Fix available
  • Severity - 4.8 (Medium)
GO-2025-4096
  • Go/github.com/opencontainers/runc
 Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc 18 Nov 2025
  • Fix available
GO-2025-4097
  • Go/github.com/opencontainers/runc
 Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc 18 Nov 2025
  • Fix available
GO-2025-4098
  • Go/github.com/opencontainers/runc
  • Go/github.com/opencontainers/selinux
 Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc 18 Nov 2025
  • Fix available
GHSA-cgrx-mc8f-2prm
  • Go/github.com/opencontainers/runc
  • Go/github.com/opencontainers/selinux
 runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects 05 Nov 2025
  • Fix available
  • Severity - 7.3 (High)
GHSA-qw9x-cqr3-wc7r
  • Go/github.com/opencontainers/runc
 runc container escape with malicious config due to /dev/console mount and related races 05 Nov 2025
  • Fix available
  • Severity - 7.3 (High)
GHSA-9493-h29p-rfm2
  • Go/github.com/opencontainers/runc
 runc container escape via "masked path" abuse due to mount race conditions 05 Nov 2025
  • Fix available
  • Severity - 7.3 (High)
GO-2024-3110
  • Go/github.com/opencontainers/runc
 Can be confused to create empty files/directories on the host in github.com/opencontainers/runc 06 Sep 2024
  • Fix available
GHSA-jfvp-7x6p-h2pv
  • Go/github.com/opencontainers/runc
 runc can be confused to create empty files/directories on the host 03 Sep 2024
  • Fix available
  • Severity - 4.8 (Medium)
GO-2022-0914
  • Go/github.com/opencontainers/runc
 Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc 21 Aug 2024
  • Fix available
GO-2022-0835
  • Go/github.com/opencontainers/runc
 Information Exposure in RunC in github.com/opencontainers/runc 21 Aug 2024
  • Fix available
GO-2022-0452
  • Go/github.com/opencontainers/runc
 Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc 21 Aug 2024
  • Fix available
GO-2022-0396
  • Go/github.com/opencontainers/runc
 Devices resource list treated as a blacklist by default in github.com/opencontainers/runc 21 Aug 2024
  • Fix available
GO-2023-1682
  • Go/github.com/opencontainers/runc
 Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc 20 Aug 2024
  • Fix available
GO-2023-1683
  • Go/github.com/opencontainers/runc
 AppArmor bypass with symlinked /proc in github.com/opencontainers/runc 20 Aug 2024
  • Fix available
Load more...