Skip to content
OpenAdvisories

Product · containers

buildah

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-44517

    Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

    Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory…

    containers buildah falco-no-driver buildah Debian Ubuntu Azure Linux Alpine Wolfi Go