github.com/

Sep 29, 2016 GO-2021-0085 +11 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Jun 3, 2016 GO-2021-0085 +11 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Apr 25, 2016 GO-2021-0085 +11 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Apr 12, 2016 GO-2021-0085 +11 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Mar 10, 2016 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Feb 10, 2016 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Jan 26, 2016 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Dec 11, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Nov 20, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Sep 11, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Aug 4, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Jul 17, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Jul 16, 2015 GO-2021-0070 +12 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: Devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc

  GO-2023-1683: AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: Can be confused to create empty files/directories on the host in github.com/opencontainers/runc

  GO-2025-3543: WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc