Opencontainers

10 CVEs across 2 Opencontainers products. Browse Opencontainers vulnerabilities, severities, and proof-of-concept exploits.

Opencontainers products with known CVEs

ProductCVEs
Runc10
Distribution-Spec1
Opencontainers CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-41579Low3.32026-07-01runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and…
CVE-2025-52881High7.52025-11-06runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc…
CVE-2025-52565High7.52025-11-06runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4…
CVE-2025-31133High7.82025-11-06runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 an…
CVE-2024-45310Low3.62024-09-03runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tr…
CVE-2024-21626High8.62024-01-31runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descrip…
CVE-2023-28642Medium6.12023-03-29runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the c…
CVE-2023-25809Medium5.02023-03-29runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/…
CVE-2022-29162Medium5.92022-05-17runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc…
CVE-2021-43784Medium6.02021-12-06runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization syst…
CVE-2021-41190Low3.02021-11-17The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification vers…