GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc
GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc
GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc
GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc