Vulnerability GO-2025-3414
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
January 28, 2025 at 03:01 PM UTC
Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0
Summary
Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
Details
Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
Build breakout using malicious Containerfile or Git HTTP server in github.com/containers/buildah
v1.38.1 - v1.46.0 GO-2026-5116
v1.38.1 - v1.46.0 GO-2026-5116
Medium Risk
4 months ago
Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
v1.38.1 - v1.43.1 GHSA-49p4-px3h-rq49
v1.38.1 - v1.43.1 GHSA-49p4-px3h-rq49
High Risk
1 year ago
Buildah allows build breakout using malicious Containerfiles and concurrent builds
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GHSA-5vpc-35f4-r8w6
v0.16.0 - v1.33.11 and v1.35.0 - v1.35.4 and v1.37.0 - v1.37.5 and v1.38.0 GHSA-5vpc-35f4-r8w6
Unknown
2 years ago
Buildah allows arbitrary directory mount in github.com/containers/buildah
v0.16.0 - v1.37.0 GO-2024-3186
v0.16.0 - v1.37.0 GO-2024-3186
Unknown
2 years ago
Improper Input Validation in Buildah and Podman in github.com/containers/buildah
v0.16.0 - v1.37.3 GO-2024-3169
v0.16.0 - v1.37.3 GO-2024-3169
Impacted packages
Timeline
Published
1 year ago
January 28, 2025 at 03:01 PM UTC
Fixed (v1.38.1)
1 year ago
January 20, 2025 at 06:22 PM UTC
Fixed (v1.33.12)
1 year ago
January 21, 2025 at 03:34 PM UTC
Fixed (v1.37.6)
1 year ago
January 22, 2025 at 06:03 PM UTC
Fixed (v1.35.5)
1 year ago
January 24, 2025 at 11:34 AM UTC
Last Modified
8 months ago
February 04, 2026 at 02:25 AM UTC