All disclosed vulnerabilities by Snyk

• • M
  Improper Link Resolution Before File Access (Leaky Vessels) in github.com/moby/buildkit/executor (golang)

  Discovered by Rory McNamara (Snyk Security Research)
  31 Jan 2024
• • H
  Race Condition (Leaky Vessels) in github.com/moby/buildkit/snapshot (golang)

  Discovered by Rory McNamara (Snyk Security Research)
  31 Jan 2024
• • H
  Race Condition (Leaky Vessels) in github.com/moby/buildkit/executor/oci (golang)

  Discovered by Rory McNamara (Snyk Security Research)
  31 Jan 2024
• • H
  Container Breakout (Leaky Vessels) in github.com/opencontainers/runc/libcontainer/integration (golang)

  Discovered by Rory McNamara (Snyk Security Research), @lifubang (acmcoder), Aleksa Sarai (SUSE)
  31 Jan 2024
• • H
  Container Breakout (Leaky Vessels) in github.com/opencontainers/runc/libcontainer/cgroups (golang)

  Discovered by Rory McNamara (Snyk Security Research), @lifubang (acmcoder), Aleksa Sarai (SUSE)
  31 Jan 2024
• • H
  Container Breakout (Leaky Vessels) in github.com/opencontainers/runc/libcontainer (golang)

  Discovered by Rory McNamara (Snyk Security Research), @lifubang (acmcoder), Aleksa Sarai (SUSE)
  31 Jan 2024
• • H
  Container Breakout (Leaky Vessels) in github.com/opencontainers/runc/libcontainer/utils (golang)

  Discovered by Rory McNamara (Snyk Security Research), @lifubang (acmcoder), Aleksa Sarai (SUSE)
  31 Jan 2024
• • H
  Arbitrary Command Injection in network (npm)

  Discovered by NodeMedic-FINE
  29 Jan 2024
• • H
  Observable Discrepancy in jsrsasign (npm)

  Discovered by Hubert Kario
  21 Jan 2024
• • H
  Improper Handling of Extra Parameters in follow-redirects (npm)

  Discovered by Kim Donggyu
  1 Jan 2024