{"action":"Upgrade github.com/opencontainers/runc to 1.0.0-rc9.0.20200122160610-2fc03cc11c77 or later.","affected":[{"fixed":"1.0.0-rc9.0.20200122160610-2fc03cc11c77","introduced":"0"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2019-19921"],"ecosystem":"Go","epss":0.00433,"exploited":false,"fixed_versions":["1.0.0-rc9.0.20200122160610-2fc03cc11c77"],"ghsa_id":"GHSA-fh74-hm69-rqjw","id":"tcs_01M5KF983S7EF9PSSKVMTJ1B4X","modified_at":"2026-09-10T03:49:14.632691018Z","published_at":"2021-05-27T18:41:17Z","references":["https://osv.dev/vulnerability/GHSA-fh74-hm69-rqjw","https://github.com/opencontainers/runc/security/advisories/GHSA-fh74-hm69-rqjw","https://nvd.nist.gov/vuln/detail/CVE-2019-19921","https://github.com/opencontainers/runc/issues/2197","https://github.com/opencontainers/runc/pull/2190","https://github.com/opencontainers/runc/pull/2207","https://github.com/opencontainers/runc/commit/2fc03cc11c775b7a8b2e48d7ee447cb9bef32ad0","https://usn.ubuntu.com/4297-1","https://security.gentoo.org/glsa/202003-21","https://security-tracker.debian.org/tracker/CVE-2019-19921","https://pkg.go.dev/vuln/GO-2021-0087","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN","https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html","https://github.com/opencontainers/runc/releases","https://access.redhat.com/errata/RHSA-2020:0695","https://access.redhat.com/errata/RHSA-2020:0688","http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00018.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-fh74-hm69-rqjw","url":"https://osv.dev/vulnerability/GHSA-fh74-hm69-rqjw"}],"summary":"opencontainers runc contains procfs race condition with a shared volume mount"}