github.com/containers/buildah vulnerabilities (Go)

9 vulnerabilities.

• github.com/containers/buildah Go Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive CVE-2026-44517 Fix available 6.3 MediumJune 16, 2026
• github.com/containers/buildah Go Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile CVE-2024-11218 Fix available 8.6 HighJanuary 21, 2025
• github.com/containers/buildah Go Buildah: buildah allows arbitrary directory mount CVE-2024-9675 Fix available 7.8 HighOctober 9, 2024
• github.com/containers/buildah Go Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction CVE-2024-9407 Fix available 4.7 MediumOctober 1, 2024
• github.com/containers/buildah Go Buildah: buildah: container escape via improper bind mount validation CVE-2024-1753 Fix available 8.6 HighMarch 18, 2024
• github.com/containers/buildah Go Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification CVE-2022-2990 Fix available 7.1 HighSeptember 13, 2022
• github.com/containers/buildah Go Non-empty default inheritable capabilities for linux container in Buildah CVE-2022-27651 Fix available 6.8 MediumApril 1, 2022
• github.com/containers/buildah Go Buildah processes using chroot isolation may leak environment values to intermediate processes CVE-2021-3602 Fix available 5.5 MediumJuly 19, 2021
• github.com/containers/buildah Go Path Traversal in Buildah CVE-2020-10696 Fix available 8.8 HighMarch 31, 2020