CRITICAL9.6PyPIcrates.ionpmGo
GHSA-f396-4rp4-7v2j· CVE-2026-46703, GO-2026-5344Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host
Modified: 9/10/2026
package
crates.io/boxlite
pkg:crates.io/boxlite
CRITICAL10.0PyPInpmGocrates.io
GHSA-g6ww-w5j2-r7x3· CVE-2026-46695, GO-2026-5392BoxLite: Permission Bypass Allows Modification of Read-Only Files
Modified: 9/10/2026
CRITICAL10.0crates.io
RUSTSEC-2026-0147· CVE-2026-46695, GHSA-g6ww-w5j2-r7x3Read-only volume remount bypass via guest CAP_SYS_ADMIN
Modified: 6/29/2026
CRITICAL10.0crates.io
RUSTSEC-2026-0148· CVE-2026-46703, GHSA-f396-4rp4-7v2jOCI layer symlink escape → arbitrary host write
Modified: 6/29/2026