runc

Direct Vulnerabilities

Known vulnerabilities in the runc package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H CVE-2026-56860	<4:1.4.2-3.el9_8
H Improper Certificate Validation	<4:1.4.2-2.el9_8
H CVE-2026-32280	<4:1.4.2-2.el9_8
H Direct Request ('Forced Browsing')	<4:1.4.2-2.el9_8
H CVE-2025-68121	<4:1.4.0-2.el9_7
H Improper Certificate Validation	<4:1.4.0-2.el9_7
H Allocation of Resources Without Limits or Throttling	<4:1.4.0-2.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
M CVE-2024-24788	<4:1.1.13-4.el9
M CVE-2024-24783	<4:1.1.12-4.el9_4
H Memory Leak	<4:1.1.12-3.el9_4
M Information Exposure	<4:1.1.12-2.el9
M Uncontrolled Recursion	<4:1.1.12-2.el9
M Uncontrolled Recursion	<4:1.1.12-2.el9
M Uncontrolled Recursion	<4:1.1.12-2.el9
H Exposure of Resource to Wrong Sphere	<4:1.1.12-1.el9_3
M Allocation of Resources Without Limits or Throttling	<4:1.1.9-2.el9_3
M CVE-2023-39321	<4:1.1.9-2.el9_3
M Resource Exhaustion	<4:1.1.9-2.el9_3
M Link Following	<4:1.1.9-1.el9
M Use of Incorrectly-Resolved Name or Reference	<4:1.1.9-1.el9
M Improper Preservation of Permissions	<4:1.1.9-1.el9
M Resource Exhaustion	<4:1.1.9-1.el9
M Integer Overflow or Wraparound	<4:1.1.9-1.el9
L Incorrect Default Permissions	<4:1.1.4-1.el9