github.com/opencontainers/runc vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41579Mediumgithub.com/opencontainers/runc: runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations CVE-2025-52881Highgithub.com/opencontainers/runc: runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2025-52565Highgithub.com/opencontainers/runc: runc container escape with malicious config due to /dev/console mount and related races CVE-2025-31133Highgithub.com/opencontainers/runc: runc container escape via "masked path" abuse due to mount race conditions CVE-2024-45310Mediumgithub.com/opencontainers/runc: runc can be confused to create empty files/directories on the host CVE-2024-21626Highgithub.com/opencontainers/runc: runc vulnerable to container breakout through process.cwd trickery and leaked fds CVE-2023-28642Mediumgithub.com/opencontainers/runc: runc AppArmor bypass with symlinked /proc CVE-2023-25809Lowgithub.com/opencontainers/runc: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc CVE-2023-27561Highgithub.com/opencontainers/runc: Opencontainers runc Incorrect Authorization vulnerability CVE-2022-29162Mediumgithub.com/opencontainers/runc: Default inheritable capabilities for linux container should be empty CVE-2019-16884Highgithub.com/opencontainers/runc: Incorrect Authorization in runc GHSA-G54H-M393-CPWQLowgithub.com/opencontainers/runc: devices resource list treated as a blacklist by default CVE-2016-9962Mediumgithub.com/opencontainers/runc: Information Exposure in RunC CVE-2016-3697Highgithub.com/opencontainers/runc: Privilege Elevation in runc CVE-2021-43784Mediumgithub.com/opencontainers/runc: Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC CVE-2019-19921Mediumgithub.com/opencontainers/runc: opencontainers runc contains procfs race condition with a shared volume mount CVE-2021-30465Highgithub.com/opencontainers/runc: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo