runc

Direct Vulnerabilities

Known vulnerabilities in the runc package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H CVE-2026-56860	<4:1.4.2-3.el9_8
H Improper Certificate Validation	<4:1.4.2-2.el9_8
H CVE-2026-32280	<4:1.4.2-2.el9_8
H Direct Request ('Forced Browsing')	<4:1.4.2-2.el9_8
H CVE-2025-68121	<4:1.4.0-2.el9_7
H Improper Certificate Validation	<4:1.4.0-2.el9_7
H Allocation of Resources Without Limits or Throttling	<4:1.4.0-2.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
H Symlink Following	<4:1.3.0-4.el9_7
M CVE-2024-24788	<4:1.1.13-4.el9
M CVE-2024-24783	<4:1.1.12-4.el9_4
H Memory Leak	<4:1.1.12-3.el9_4
M Uncontrolled Recursion	<4:1.1.12-2.el9
M Uncontrolled Recursion	<4:1.1.12-2.el9
M Information Exposure	<4:1.1.12-2.el9
M Uncontrolled Recursion	<4:1.1.12-2.el9
H Exposure of Resource to Wrong Sphere	<4:1.1.12-1.el9_3
M CVE-2023-39321	<4:1.1.9-2.el9_3
M Resource Exhaustion	<4:1.1.9-2.el9_3
M Allocation of Resources Without Limits or Throttling	<4:1.1.9-2.el9_3
M Improper Preservation of Permissions	<4:1.1.9-1.el9
M Resource Exhaustion	<4:1.1.9-1.el9
M Use of Incorrectly-Resolved Name or Reference	<4:1.1.9-1.el9
M Link Following	<4:1.1.9-1.el9
M Integer Overflow or Wraparound	<4:1.1.9-1.el9
L Incorrect Default Permissions	<4:1.1.4-1.el9