crates.io/youki CVE-2025-54867: high 7, EPSS 0.18%
Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.
Action: Upgrade youki to 0.5.5 or later.
cargo update -p youki --precise 0.5.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.5 | - |
Fixed versions
| 0.5.5 |
Sources
- osv: GHSA-j26p-6wx7-f3pw
- https://github.com/youki-dev/youki/security/advisories/GHSA-j26p-6wx7-f3pw
- https://nvd.nist.gov/vuln/detail/CVE-2025-54867
- https://github.com/youki-dev/youki/commit/0d9b4f2aa5ceaf988f3eb568711d2acf0a4ace37
- https://github.com/youki-dev/youki
- https://github.com/youki-dev/youki/releases/tag/v0.5.5
CVE-2025-54867 · published · modified · JSON