MEDIUM6.3Go
GHSA-49p4-px3h-rq49· CVE-2026-44517, GO-2026-5116Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
Modified: 7/27/2026
package
Go/github.com/containers/buildah
pkg:go/github.com/containers/buildah
MEDIUM4.4Go
GHSA-586p-749j-fhwp· CVE-2024-9675, GO-2024-3186Buildah allows arbitrary directory mount
Modified: 9/10/2026
HIGH8.6Go
GHSA-5vpc-35f4-r8w6· CVE-2024-11218, GO-2025-3414Buildah allows build breakout using malicious Containerfiles and concurrent builds
Modified: 9/10/2026
MEDIUM5.5Go
GHSA-7638-r9r3-rmjj· CVE-2021-3602, GO-2022-0345Buildah processes using chroot isolation may leak environment values to intermediate processes
Modified: 9/10/2026
MEDIUM6.8Go
GHSA-c3g4-w6cv-6v7h· CVE-2022-27651, GO-2022-0417Non-empty default inheritable capabilities for linux container in Buildah
Modified: 9/10/2026
MEDIUM4.7Go
GHSA-fhqq-8f65-5xfc· CVE-2024-9407, GO-2024-3169Improper Input Validation in Buildah and Podman
Modified: 9/10/2026
HIGH7.1Go
GHSA-fjm8-m7m6-2fjp· CVE-2022-2990, GO-2022-1008Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification
Modified: 9/10/2026
HIGH8.8Go
GHSA-fx8w-mjvm-hvpc· CVE-2020-10696, GO-2022-0828Path Traversal in Buildah
Modified: 9/10/2026
HIGHGo
GHSA-pmf3-c36m-g5cf· CVE-2024-1753, GHSA-874v-pj72-92f3Container escape at build time
Modified: 9/10/2026
—Go
GO-2022-0345· CVE-2021-3602, GHSA-7638-r9r3-rmjjEnvironment variable leakage in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2022-0417· CVE-2022-27651, GHSA-c3g4-w6cv-6v7hIncorrect default permissions in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2022-0828· CVE-2020-10696, GHSA-fx8w-mjvm-hvpcPath Traversal in Buildah in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2022-1008· CVE-2022-2990, GHSA-fjm8-m7m6-2fjpUnauthorized file access in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2024-2658· CVE-2024-1753, GHSA-874v-pj72-92f3Container escape at build time in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2024-3169· CVE-2024-9407, GHSA-fhqq-8f65-5xfcImproper Input Validation in Buildah and Podman in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2024-3186· CVE-2024-9675, GHSA-586p-749j-fhwpBuildah allows arbitrary directory mount in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2025-3414· CVE-2024-11218, GHSA-5vpc-35f4-r8w6Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
Modified: 2/4/2026
—Go
GO-2026-5116· CVE-2026-44517, GHSA-49p4-px3h-rq49Build breakout using malicious Containerfile or Git HTTP server in github.com/containers/buildah
Modified: 7/27/2026