Vulnerability GO-2024-3186
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
October 11, 2024 at 02:32 PM UTC
Buildah allows arbitrary directory mount in github.com/containers/buildah
v0.16.0 - v1.37.0
v0.16.0 - v1.37.0
Summary
Buildah allows arbitrary directory mount in github.com/containers/buildah
Details
Buildah allows arbitrary directory mount in github.com/containers/buildah
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
Build breakout using malicious Containerfile or Git HTTP server in github.com/containers/buildah
v1.38.1 - v1.46.0 GO-2026-5116
v1.38.1 - v1.46.0 GO-2026-5116
Medium Risk
4 months ago
Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
v1.38.1 - v1.43.1 GHSA-49p4-px3h-rq49
v1.38.1 - v1.43.1 GHSA-49p4-px3h-rq49
Unknown
1 year ago
Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GO-2025-3414
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GO-2025-3414
High Risk
1 year ago
Buildah allows build breakout using malicious Containerfiles and concurrent builds
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GHSA-5vpc-35f4-r8w6
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GHSA-5vpc-35f4-r8w6
Unknown
2 years ago
Improper Input Validation in Buildah and Podman in github.com/containers/buildah
v0.16.0 - v1.37.3 GO-2024-3169
v0.16.0 - v1.37.3 GO-2024-3169
Impacted packages
Timeline
Published
2 years ago
October 11, 2024 at 02:32 PM UTC
Fixed (v1.37.1)
2 years ago
August 12, 2024 at 07:40 PM UTC
Last Modified
8 months ago
February 04, 2026 at 02:32 AM UTC