Skip to content
OpenAdvisories

Package · Go

github.com/opencontainers/selinux

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.3
    CVE-2025-52881 Public exploit

    runc: LSM labels can be bypassed with malicious config using dummy procfs files

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…

    opencontainers runc podman github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2019-16884

    Incorrect Authorization in runc

    runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.

    containerd runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go