Security
فارسی
All products

github.com/cri-o/cri-o

Go · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CRI-O vulnerable to an arbitrary systemd property injectionCVE-2024-3154 · GHSA-2CGQ-H8XW-2V5JVersion ranges need review. github.com/cri-o/cri-o Go High Fix reported
malicious container creates symlink "mtab" on the host ExternalCVE-2024-5154 · GHSA-J9HF-98C3-WRM8Version ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 3.11/cri-o GoRed Hat High Fix reported
Node DOS by way of memory exhaustion through ExecSync request in CRI-OCVE-2022-1708 · GHSA-FCM2-6C3H-PG6JVersion ranges need review. github.com/cri-o/cri-oRed Hat Enterprise Linux 9/conmon GoRed Hat High Fix reported
Incorrect Default Permissions in CRI-OCVE-2022-27652 · GHSA-4HJ2-R2PM-3HC6Version ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 3.11/cri-o GoRed Hat Medium Fix reported
Code Injection in CRI-OCVE-2022-0811 · GHSA-6X2M-W449-QWX7Version ranges need review. github.com/cri-o/cri-o Go High Fix reported
CRI-O Path Traversal vulnerabilityCVE-2025-0750 · GHSA-HP5J-2585-QX6GVersion ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 4/openshift/ose-rhel-coreos-9 GoRed Hat Medium No fix reported
CRI-O has Potential High Memory Consumption from File ReadCVE-2025-4437 · GHSA-8F93-J3FX-72F3Version ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 4/cri-o GoRed Hat Medium No fix reported
CRI-O: Maliciously structured checkpoint file can gain arbitrary node accessCVE-2024-8676 · GHSA-7P9F-6X8J-GXXPVersion ranges need review. github.com/cri-o/cri-oRed Hat Enterprise Linux 8/container-tools:rhel8/podman GoRed Hat Medium Fix reported
CRI-O's pods can break out of resource confinement on cgroupv2CVE-2023-6476 · GHSA-P4RX-7WVG-FWRCVersion ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 3.11/cri-o GoRed Hat Medium Fix reported
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege EscalationCVE-2022-4318 · GHSA-CM9X-C3RH-7RC4Version ranges need review. github.com/cri-o/cri-o Go Medium Fix reported
CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosureCVE-2022-2995 · GHSA-PHJR-8J92-W5V7Version ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 3.11/cri-o GoRed Hat High Fix reported
Incorrect Permission Assignment for Critical Resource in CRI-OCVE-2022-0532 · GHSA-JQMC-79GX-7G8PVersion ranges need review. github.com/cri-o/cri-oRed Hat OpenShift Container Platform 3.11/cri-o GoRed Hat Medium Fix reported
Sysctls applied to containers with host IPC or host network namespaces can affect the hostGHSA-W2J5-3RCX-VX7X · GO-2022-0363Version ranges need review. github.com/cri-o/cri-o Go Medium Fix reported