Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3101.json"