-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/opencontainers/runc | go | >= 1.0.0-rc95, < 1.1.5 | 1.1.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from a regression in path validation logic introduced by commit 0ca91f4 (CVE-2021-30465 fix), which switched to using SecureJoin for path resolution. This made previous symlink checks in prepareRootfs ineffective, as SecureJoin resolves symlinks before validation. The fix in commit 0d72adf moved symlink checks before SecureJoin usage, confirming the vulnerable pattern existed in the mount destination handling within prepareRootfs. The file path and function are explicitly referenced in vulnerability descriptions and patch commits.