When reporting a security issue, do not create an issue or file a pull request on GitHub. The reporting process and disclosure communications are outlined here.
Security: opencontainers/runc
Security
SECURITY.md
-
malicious image with /dev symlink can trigger limited host filesystem integrity violationsGHSA-xjvp-4fhw-gc47 published
Jun 13, 2026 by cypharLow -
container escape with malicious config due to /dev/console mount and related racesGHSA-qw9x-cqr3-wc7r published
Nov 5, 2025 by cypharHigh -
container escape and denial of service due to arbitrary write gadgets and procfs write redirectsGHSA-cgrx-mc8f-2prm published
Nov 5, 2025 by cypharHigh -
container escape via "masked path" abuse due to mount race conditionsGHSA-9493-h29p-rfm2 published
Nov 5, 2025 by cypharHigh -
runc can be tricked into creating empty files/directories on the hostGHSA-jfvp-7x6p-h2pv published
Sep 3, 2024 by cypharLow -
several container breakouts due to internally leaked fdsGHSA-xr7r-f8xq-vfvv published
Jan 31, 2024 by cypharHigh -
AppArmor/SELinux bypass with symlinked /procGHSA-g2j6-57v7-gm8c published
Mar 29, 2023 by cypharModerate -
rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unsharedGHSA-m8cg-xc2p-r3fc published
Mar 29, 2023 by cypharLow -
Default inheritable capabilities for linux container should be emptyGHSA-f3fp-gc8g-vw66 published
May 11, 2022 by cypharLow -
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configurationGHSA-v95c-p5hm-xq8f published
Dec 6, 2021 by cypharLow
Learn more about advisories related to opencontainers/runc in the GitHub Advisory Database