github.com/containers/buildah vulnerabilities

CVEs whose affected-version data names the github.com/containers/buildah package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2026-44517Medium· 6.3

2mo ago

Buildah is a tool that facilitates building OCI images

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirector…

▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.18%via NVD

CVE-2024-11218High· 8.6

1y ago

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it …

▾ Twilightcontainers · github.com/containers/buildahEPSS 0.36%via NVD

CVE-2022-27651Medium· 6.8

4y ago

Non-empty default inheritable capabilities for linux container in Buildah

▾ Sunlitcontainers · github.com/containers/buildahEPSS 1.3%via OSV

CVE-2021-3602Medium· 5.5

5y ago

Buildah processes using chroot isolation may leak environment values to intermediate processes

▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.33%via OSV