github.com/opencontainers/runc
CLI tool for spawning and running containers according to the OCI specification
View on Github
Activity
- Latest release
- 3w ago
- Total releases
- 65
- Cadence
- ~27 days
- Last 12 months
- 17
Reach
- Stars
- 13.5k
Details
- First release
- Jul 17, 2015
| Version | Released | |
|---|---|---|
v1.6.0-rc.1
pre
|
v1.6.0-rc.1
pre
Dependencies (22)
+ 14 more |
|
v1.5.2
patch
|
v1.5.2
patch
Dependencies (23)
+ 15 more |
|
v1.5.1
patch
|
v1.5.1
patch
Dependencies (23)
+ 15 more |
|
v1.5.0
minor
|
v1.5.0
minor
Dependencies (23)
+ 15 more |
|
v1.4.3
patch
|
v1.4.3
patch
Dependencies (22)
+ 14 more |
|
v1.3.6
patch
|
v1.3.6
patch
Dependencies (21)
+ 13 more |
|
v1.5.0-rc.3
pre
|
v1.5.0-rc.3
pre
Dependencies (23)
+ 15 more |
|
v1.5.0-rc.2
pre
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.5.0-rc.2
pre
Dependencies (23)
+ 15 more |
|
v1.4.2
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.4.2
patch
Dependencies (22)
+ 14 more |
|
v1.3.5
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.3.5
patch
Dependencies (21)
+ 13 more |
|
v1.5.0-rc.1
pre
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.5.0-rc.1
pre
Dependencies (22)
+ 14 more |
|
v1.4.1
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.4.1
patch
Dependencies (22)
+ 14 more |
|
v1.2.9
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.2.9
patch
Dependencies (21)
+ 13 more |
|
v1.3.4
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.3.4
patch
Dependencies (21)
+ 13 more |
|
v1.4.0
minor
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (22)
+ 14 more |
|
v1.4.0-rc.3
pre
|
v1.4.0-rc.3
pre
Dependencies (22)
+ 14 more |
|
v1.3.3
patch
1 CVE
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev |
v1.3.3
patch
Dependencies (21)
+ 13 more |
|
v1.4.0-rc.2
pre
3 CVEs
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.0-rc.2
pre
Dependencies (22)
+ 14 more |
|
v1.3.2
minor
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.2
minor
Dependencies (21)
+ 13 more |
|
v1.4.0-rc.1
pre
3 CVEs
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.0-rc.1
pre
Dependencies (22)
+ 14 more |
|
v1.3.1
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.1
patch
Dependencies (21)
+ 13 more |
|
v1.3.0
minor
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0
minor
Dependencies (21)
+ 13 more |
|
v1.3.0-rc.2
pre
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0-rc.2
pre
Dependencies (21)
+ 13 more |
|
v1.3.0-rc.1
pre
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0-rc.1
pre
Dependencies (21)
+ 13 more |
|
v1.2.4
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.4
patch
Dependencies (21)
+ 13 more |
|
v1.2.2
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.2
patch
Dependencies (21)
+ 13 more |
|
v1.2.1
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.1
patch
Dependencies (21)
+ 13 more |
|
v1.2.0
minor
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (21)
+ 13 more |
|
v1.1.15
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.15
patch
Dependencies (19)
+ 11 more |
|
v1.2.0-rc.3
pre
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-rc.3
pre
Dependencies (20)
+ 12 more |
|
v1.1.14
patch
4 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.14
patch
Dependencies (19)
+ 11 more |
|
v1.2.0-rc.2
pre
5 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-rc.2
pre
Dependencies (20)
+ 12 more |
|
v1.1.13
patch
5 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.13
patch
Dependencies (19)
+ 11 more |
|
v1.2.0-rc.1
pre
5 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-rc.1
pre
Dependencies (20)
+ 12 more |
|
v1.1.12
patch
5 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.12
patch
Dependencies (19)
+ 11 more |
|
v1.1.11
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.11
patch
Dependencies (19)
+ 11 more |
|
v1.1.10
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.10
patch
Dependencies (19)
+ 11 more |
|
v1.1.9
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.9
patch
Dependencies (19)
+ 11 more |
|
v1.1.8
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.8
patch
Dependencies (19)
+ 11 more |
|
v1.1.7
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.7
patch
Dependencies (19)
+ 11 more |
|
v1.1.5
patch
6 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.5
patch
Dependencies (19)
+ 11 more |
|
v1.1.4
patch
9 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.4
patch
Dependencies (19)
+ 11 more |
|
v1.1.3
patch
9 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.3
patch
Dependencies (19)
+ 11 more |
|
v1.1.2
patch
9 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.2
patch
Dependencies (19)
+ 11 more |
|
v1.1.0
minor
10 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (19)
+ 11 more |
|
v1.0.3
patch
11 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-43784
GO-2022-0274
GHSA-v95c-p5hm-xq8f
Jul 15, 2022
Namespace restriction bypass in github.com/opencontainers/runc An attacker with partial control over the bind mount sources of a new container can bypass namespace restrictions. Fixed in
1.1.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.3
patch
Dependencies (21)
+ 13 more |
|
v1.0.1
major
11 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-27561
GO-2023-1627
GHSA-vpvm-3wq2-2wvm
Aug 20, 2024
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc Fixed in
1.1.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-43784
GO-2022-0274
GHSA-v95c-p5hm-xq8f
Jul 15, 2022
Namespace restriction bypass in github.com/opencontainers/runc An attacker with partial control over the bind mount sources of a new container can bypass namespace restrictions. Fixed in
1.1.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.1
major
Dependencies (21)
+ 13 more |
|
v1.0.0-rc94
pre
10 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-30465
GO-2022-0914
GHSA-c3xm-pvg7-gh7r
Aug 21, 2024
Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Fixed in
1.0.0-rc95
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-21626
GO-2024-2491
GHSA-xr7r-f8xq-vfvv
Jun 28, 2024
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc Fixed in
1.1.12
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0-rc94
pre
Dependencies (21)
+ 13 more |
|
v1.0.0-rc92
pre
9 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-30465
GO-2022-0914
GHSA-c3xm-pvg7-gh7r
Aug 21, 2024
Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Fixed in
1.0.0-rc95
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0-rc92
pre
Dependencies (19)
+ 11 more |
|
v1.0.0-rc91
pre
9 CVEs
CVE-2026-41579
GO-2026-5761
GHSA-xjvp-4fhw-gc47
Jul 07, 2026
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc Fixed in
1.3.6
1.4.3
1.5.0-rc.3
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2025-52881
GO-2025-4098
GHSA-cgrx-mc8f-2prm
Nov 18, 2025
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-52565
GO-2025-4097
GHSA-qw9x-cqr3-wc7r
Nov 18, 2025
Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-31133
GO-2025-4096
GHSA-9493-h29p-rfm2
Nov 18, 2025
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc Fixed in
1.2.8
1.3.3
1.4.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-45310
GO-2024-3110
GHSA-jfvp-7x6p-h2pv
Sep 06, 2024
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Can be confused to create empty files/directories on the host in github.com/opencontainers/runc Fixed in
1.1.14
1.2.0-rc.3
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-30465
GO-2022-0914
GHSA-c3xm-pvg7-gh7r
Aug 21, 2024
Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc Fixed in
1.0.0-rc95
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29162
GO-2022-0452
GHSA-f3fp-gc8g-vw66
Aug 21, 2024
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc Fixed in
1.1.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-28642
GO-2023-1683
GHSA-g2j6-57v7-gm8c
Aug 20, 2024
AppArmor bypass with symlinked /proc in github.com/opencontainers/runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-25809
GO-2023-1682
GHSA-m8cg-xc2p-r3fc
Aug 20, 2024
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc Fixed in
1.1.5
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0-rc91
pre
Dependencies (19)
+ 11 more |