HIGH8.8
GO-2026-6656
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner
Quick fix
GO-2026-6656 — gitea.com/gitea/runner: upgrade to the fixed version with the command below.
go get gitea.com/gitea/runner@v1.0.9-0.20260731160927-34bfa1915022Details
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/gitea.com/gitea/runner
Introduced in:
0Fixed in: 1.0.9-0.20260731160927-34bfa1915022Fix
go get gitea.com/gitea/runner@v1.0.9-0.20260731160927-34bfa1915022