-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from how runc exec --cap handled capability assignment. The commit diff shows the removal of a line in exec.go that added --cap-specified capabilities to the Inheritable set. This directly matches the CVE description of the flaw. The getProcess function in exec.go was responsible for this incorrect capability propagation. The high confidence comes from the explicit patch removing the vulnerable line and the CVE's technical details aligning with this code change.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/opencontainers/runc | go | < 1.1.2 | 1.1.2 |
Ongoing coverage of React2Shell