Go to main page
Versions in this module
v1
Oct 6, 2026
Sep 24, 2026
Jul 14, 2026
Jun 19, 2026
Jun 13, 2026
Apr 3, 2026 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 13, 2026 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 13, 2026
Apr 2, 2026 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 12, 2026 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 27, 2025 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 5, 2025
Oct 9, 2025 GO-2025-4096 +2 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
Sep 5, 2025 GO-2025-4096 +2 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
Jun 13, 2026
Mar 17, 2026 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 27, 2025 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 5, 2025 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Oct 1, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 4, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 29, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 9, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 4, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 27, 2025 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 5, 2025 GO-2026-5761
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 4, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 14, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Feb 13, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 6, 2025 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Dec 10, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 15, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 1, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Oct 21, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 3, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 26, 2024 GO-2024-3110 +4 more
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 3, 2024 GO-2024-3110 +4 more
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Oct 4, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 3, 2024 GO-2025-4096 +3 more
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 13, 2024 GO-2024-3110 +4 more
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 23, 2024 GO-2024-3110 +4 more
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 2, 2024 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 1, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 10, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jul 19, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 26, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 11, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 29, 2023 GO-2024-2491 +5 more
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 24, 2022 GO-2023-1627 +8 more
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 8, 2022 GO-2023-1627 +8 more
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
May 5, 2022 GO-2023-1627 +8 more
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 28, 2022 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 17, 2022 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Dec 14, 2021 GO-2022-0274 +10 more
GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Dec 3, 2021 GO-2022-0274 +10 more
GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 20, 2021 GO-2022-0274 +10 more
GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jul 16, 2021 GO-2022-0274 +10 more
GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 17, 2021 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
May 19, 2021 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
May 10, 2021 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Feb 3, 2021 GO-2022-0452 +9 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 5, 2020 GO-2022-0452 +8 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 30, 2020 GO-2022-0452 +8 more
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 22, 2020 GO-2022-0396 +9 more
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 30, 2019 GO-2021-0087 +10 more
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 24, 2019 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 28, 2019 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 21, 2018 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Feb 27, 2018 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 2, 2017 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 21, 2017 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 29, 2016 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 22, 2020 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jun 3, 2016 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
v0
Apr 25, 2016 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Apr 12, 2016 GO-2021-0085 +11 more
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Mar 10, 2016 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Feb 10, 2016 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jan 26, 2016 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Dec 11, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Nov 20, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Sep 11, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Aug 4, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jul 17, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Jul 16, 2015 GO-2021-0070 +12 more
GO-2021-0070: Privilege escalation in github.com/opencontainers/runc
GO-2021-0085: Authorization bypass in github.com/opencontainers/runc
GO-2021-0087: Race condition in github.com/opencontainers/runc
GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc
GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc