{"action":"Upgrade youki to 0.5.7 or later.","affected":[{"fixed":"0.5.7","introduced":"0"}],"component":"youki","cve_ids":["CVE-2025-62596"],"ecosystem":"crates.io","epss":0.00267,"exploited":false,"fixed_versions":["0.5.7"],"ghsa_id":"GHSA-vf95-55w6-qmrf","id":"tcs_01M5KF3H5HJDJVW34492WYRAEQ","modified_at":"2025-11-15T02:25:28Z","published_at":"2025-11-05T18:45:18Z","references":["https://osv.dev/vulnerability/GHSA-vf95-55w6-qmrf","https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm","https://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf","https://nvd.nist.gov/vuln/detail/CVE-2025-62596","https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a","https://github.com/youki-dev/youki","https://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs","https://youtu.be/tGseJW_uBB8","https://youtu.be/y1PaBzxwRWQ"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-vf95-55w6-qmrf","url":"https://osv.dev/vulnerability/GHSA-vf95-55w6-qmrf"}],"summary":"youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects"}