Database/Container, Kubernetes & orchestration
Buildah: Symlink following when reading .containerignore/.dockerignore discloses host files
CVSS 5.3CVE-2022-4122Container, Kubernetes & orchestrationcurated
Impact
Symlink following when reading .containerignore/.dockerignore discloses host files
Who can reach it
Malicious build context
What to do
Upgrade Buildah on build hosts
References
Related entries
- containerd: Supplementary groups not set up correctly inside containersCVE-2023-25173 · containerdMedium
- BuildKit: Malicious client or frontend crashes the BuildKit daemonCVE-2024-23650 · BuildKitMedium
- Argo CD: /api/v1/settings exposes sensitive settings without authenticationCVE-2024-37152 · Argo CDMedium
- Cilium: Denial of service in the Cilium dataplaneCVE-2025-23028 · CiliumMedium
- kuma-dp: readiness port 9902 proxies the Envoy admin API to the pod network with no authenticationCVE-2026-18673 · Kong Mesh / kuma-dp readiness service on TCP 9902 (Envoy admin proxy)Medium
- containerd: Crafted image causes DoS during container creationCVE-2026-47262 · containerdMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.