CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2024-2458" }