{"action":"Upgrade github.com/opencontainers/runc to 1.1.12 or later.","affected":[{"fixed":"1.1.12","introduced":"1.0.0-rc93"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2024-21626"],"ecosystem":"Go","epss":0.18923,"exploited":false,"fixed_versions":["1.1.12"],"ghsa_id":"GHSA-xr7r-f8xq-vfvv","id":"tcs_01M5KG15885C9RQQ62XYZNK1W1","modified_at":"2026-02-04T02:39:00.262696Z","published_at":"2024-06-28T15:28:53Z","references":["https://osv.dev/vulnerability/GO-2024-2491","https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv","https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf","http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2491","url":"https://osv.dev/vulnerability/GO-2024-2491"}],"summary":"Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc"}