{"action":"Upgrade github.com/opencontainers/runc to 1.0.0-rc95 or later.","affected":[{"fixed":"1.0.0-rc95","introduced":"0"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2021-30465"],"ecosystem":"Go","epss":0.10245,"exploited":false,"fixed_versions":["1.0.0-rc95"],"ghsa_id":"GHSA-c3xm-pvg7-gh7r","id":"tcs_01M5KF6NS55X7H1X171MJMQVGF","modified_at":"2026-09-10T03:49:14.427758087Z","published_at":"2021-05-25T18:44:42Z","references":["https://osv.dev/vulnerability/GHSA-c3xm-pvg7-gh7r","https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r","https://nvd.nist.gov/vuln/detail/CVE-2021-30465","https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f","https://bugzilla.opensuse.org/show_bug.cgi?id=1185405","https://github.com/opencontainers/runc/releases","https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV","https://security.gentoo.org/glsa/202107-26","https://security.netapp.com/advisory/ntap-20210708-0003","http://www.openwall.com/lists/oss-security/2021/05/19/2"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-c3xm-pvg7-gh7r","url":"https://osv.dev/vulnerability/GHSA-c3xm-pvg7-gh7r"}],"summary":"mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs"}