Executive brief
Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer
Affected products
- Go github.com/apptainer/apptainer
Junglewise Threat Intelligence
CVE-2023-38496: GO-2023-1965 - Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer
CVE-2023-38496 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: github.com/apptainer/apptainer (Go). Vendors: Go.
Related threats
- Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the lim
- GO-2025-4176 - Apptainer ineffectively applies selinux and apparmor --security options in github.com/apptainer/apptainer
- GO-2023-1738 - Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer