StackRadar

CVE-2024-21626

High

Advisory

Published 31 Jan 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.181
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
226
of 17,781 indexed, latest versions
Container images
159
deployed by those charts
Fix available
8 of 8
affected packages

runc vulnerable to container breakout through process.cwd trickery and leaked fds

Carried by container images the latest versions of 226 of 17,781 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc93, v1.0.0-rc95, v1.0.1, v1.0.2+11 more1.1.12159
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-71.module+el8.9.0+21243+a586538b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-4.module+el8.9.0+21243+a586538b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.12-1.module+el8.9.0+21243+a586538b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-1.module+el8.9.0+21243+a586538b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.9.0+21243+a586538b1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.13.3-3.module+el8.9.0+21243+a586538b1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.1-1.module+el8.9.0+21243+a586538b1
OSV records
GHSA-xr7r-f8xq-vfvvRHSA-2024:0752
Also known as
GO-2024-2491, RHSA-2024:0759

Charts affected

226 by stars
ChartLatestAffected imagesRadar Score
dagsterdagsterVerified publisher1.13.221 of 5See more

dagster dagster 1.13.22

1 of the 5 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:14.6f565573d74ae
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

3,455
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

5,552
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/opencontainers/runc@v1.1.2
1.1.12

Open the chart page →

2,453
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

32,259
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

4,983
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/opencontainers/runc@v1.1.2
1.1.12

Open the chart page →

16,251
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

1,556
chatwootchatwootVerified publisher2.0.242 of 3See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
github.com/opencontainers/runc@v1.0.1
1.1.12
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

9,203
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

4,167
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

32,902
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

17,245
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/opencontainers/runc@v1.0.0-rc93
1.1.12

Open the chart page →

2,409
rekorsigstoreVerified publisher1.8.51 of 9See more

rekor sigstore 1.8.5

1 of the 9 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

5,415
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/opencontainers/runc@v1.1.9
1.1.12

Open the chart page →

1,698
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

5,674
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/opencontainers/runc@v1.1.10
1.1.12

Open the chart page →

1,981
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

96,941
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
github.com/opencontainers/runc@v1.1.9
1.1.12

Open the chart page →

19,337
eshoponabpabp-charts1.0.02 of 15See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
github.com/opencontainers/runc@v1.1.0
1.1.12
library/postgres:14.13162a6ead070
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

19,799
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

3,569
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

7,960
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,264
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:115d2aa4a7b5f9
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

7,273
kubeviouskubevious1.2.22 of 7See more

kubevious kubevious 1.2.2

2 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
github.com/opencontainers/runc@v1.0.1
1.1.12
redislabs/redisearch:2.4.1433561794c5c8
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

14,204
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

3,793
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/opencontainers/runc@v1.1.3
1.1.12
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

28,534
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
github.com/opencontainers/runc@v1.1.0
1.1.12
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

17,877
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

8,341
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

17,896
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

2,947
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

2,898
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

2,713
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/opencontainers/runc@v1.1.1
1.1.12

Open the chart page →

2,969
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/opencontainers/runc@v1.1.3
1.1.12

Open the chart page →

5,598
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/opencontainers/runc@v1.1.7
1.1.12

Open the chart page →

2,576
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/opencontainers/runc@v1.1.2
1.1.12

Open the chart page →

18,376
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/opencontainers/runc@v1.1.2
1.1.12

Open the chart page →

3,658
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
github.com/opencontainers/runc@v1.1.0
1.1.12
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/opencontainers/runc@v1.1.9
1.1.12

Open the chart page →

15,383
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

2,556
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:15.38775adb39f0d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

15,562
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

13,610
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
github.com/opencontainers/runc@v1.0.2
1.1.12

Open the chart page →

9,318
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,264
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:115d2aa4a7b5f9
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,408
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

3,274
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

4,389
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/opencontainers/runc@v1.1.4
1.1.12

Open the chart page →

3,136
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
github.com/opencontainers/runc@v1.0.3
1.1.12

Open the chart page →

8,967
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
github.com/opencontainers/runc@v1.1.0
1.1.12
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
github.com/opencontainers/runc@v1.0.1
1.1.12
bitnamilegacy/rabbitmq:3.10.88f7161d8ce19
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

37,373
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

14,250

Container images carrying it

159 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.12
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/opencontainers/runc@v1.1.7
1.1.12
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/opencontainers/runc@v1.1.2
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
github.com/opencontainers/runc@v1.1.7
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.