Crun Project Crun
3 CVEs affecting Crun Project Crun. Latest disclosed: 2026-03-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18837 | High | 8.6 | 2019-11-13 | An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files out… |
CVE-2022-27650 | High | 7.5 | 2022-04-04 | A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where… |
CVE-2026-30892 | Unrated | | 2026-03-26 | crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed… |