Executive brief
Unauthorized file access in github.com/containers/buildah
Affected products
- Go github.com/containers/buildah
Junglewise Threat Intelligence
CVE-2022-2990: GO-2022-1008 - Unauthorized file access in github.com/containers/buildah
CVE-2022-2990 · Severity: low · CVSS 3.1 · Published 2022-09-21
Technologies: github.com/containers/buildah (Go). Vendors: Go.
Related threats
- Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not secur
- GO-2025-3414 - Buildah allows build breakout using malicious Containerfiles and concurrent builds in github.com/containers/buildah
- GO-2024-3169 - Improper Input Validation in Buildah and Podman in github.com/containers/buildah
- containers Buildah path traversal in cache mounts
- GO-2022-0828 - Path Traversal in Buildah in github.com/containers/buildah