github.com/containers/buildah vulnerabilities
CVEs whose affected-version data names the github.com/containers/buildah package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-44517Medium· 6.3Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.18%via GHSA
CVE-2024-11218High· 8.6A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it …
▾ Twilightcontainers · github.com/containers/buildahEPSS 0.36%via NVD
CVE-2022-27651Medium· 6.8Non-empty default inheritable capabilities for linux container in Buildah
Non-empty default inheritable capabilities for linux container in Buildah
▾ Sunlitcontainers · github.com/containers/buildahEPSS 1.3%via OSV
CVE-2021-3602Medium· 5.5Buildah processes using chroot isolation may leak environment values to intermediate processes
Buildah processes using chroot isolation may leak environment values to intermediate processes
▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.33%via OSV