ubi8/buildah vulnerabilities

CVEs whose affected-version data names the ubi8/buildah package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-79705Medium· 4.5

1w ago

A flaw was found in the buildah/copier Go package

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended de…

▾ SunlitRed Hat · ansible-automation-platform-24/eda-controller-rhel8EPSS 0.25%via NVD