Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/22 8:15 p.m.20 views

Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

Impact When processing a build contexts or add/copy instructions, a malicious server serving a Git repository or a tar archive file can cause files outside of the build context directory to be included in the build context or copied into the build. Patches Fixed in Buildah 1.44 and 1.43.2...

6.3CVSS5.8AI score0.0018EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder