CVE-2021-30465

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

CVE-2019-3889

CVE-2019-3889 is a reflected XSS in the authentication flow of OpenShift Container Platform. Affected versions include openshift-online-3, and openshift-enterprise-3.4–3.7 and 3.9–3.11. The vulnerability could enable an attacker to exfiltrate authorization data via a malicious link, with exploita...