StackRadar

CVE-2024-21626

High

Advisory

Published 31 Jan 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.181
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
226
of 17,781 indexed, latest versions
Container images
159
deployed by those charts
Fix available
8 of 8
affected packages

runc vulnerable to container breakout through process.cwd trickery and leaked fds

Carried by container images the latest versions of 226 of 17,781 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc93, v1.0.0-rc95, v1.0.1, v1.0.2+11 more1.1.12159
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-71.module+el8.9.0+21243+a586538b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-4.module+el8.9.0+21243+a586538b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.12-1.module+el8.9.0+21243+a586538b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-1.module+el8.9.0+21243+a586538b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.9.0+21243+a586538b1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.13.3-3.module+el8.9.0+21243+a586538b1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.1-1.module+el8.9.0+21243+a586538b1
OSV records
GHSA-xr7r-f8xq-vfvvRHSA-2024:0752
Also known as
GO-2024-2491, RHSA-2024:0759

Charts affected

226 by stars
ChartLatestAffected imagesRadar Score
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

3,034
postgres-backuppostgres-backup0.3.01 of 2See more

postgres-backup postgres-backup 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,462
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:9.6caddd35b05cd
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

6,639
kimai2robjuz5.0.131 of 2See more

kimai2 robjuz 5.0.13

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

4,693
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

12,930
scaffoldsigstoreVerified publisher0.6.1141 of 15See more

scaffold sigstore 0.6.114

1 of the 15 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

7,710
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

2,022
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

3,176
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

7,025
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

4,547
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.12

Open the chart page →

4,576
ingress-nginxantmediaVerified publisher4.4.01 of 2See more

ingress-nginx antmedia 4.4.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.12

Open the chart page →

3,322
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

19,745
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:14.32d1e636f0778
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

3,166
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

16,975
appwriteappwrite-helmVerified publisher1.3.22 of 8See more

appwrite appwrite-helm 1.3.2

2 of the 8 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
github.com/opencontainers/runc@v1.1.0
1.1.12
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

9,847
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

5,537
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

13,352
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
postgis/postgis:15-3.3a2fc46b52819
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

10,061
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

45,363
phonebook-chartasumankamberoglu0.1.51 of 3See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

3,176
stackbitpokeVerified publisher0.12.41 of 6See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/opencontainers/runc@v1.1.4
1.1.12

Open the chart page →

9,897
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

19,229
redisbook-k8sinfra-v21.0.01 of 1See more

redis book-k8sinfra-v2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/redis:7.0.4091a7b5de688
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

1,731
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

1,400
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

8,001
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
github.com/opencontainers/runc@v1.0.0-rc95
1.1.12

Open the chart page →

3,329
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
containers-common@2:1-64.module+el8.8.0+18571+eed59fc4
criu@3.15-4.module+el8.8.0+19044+f9982fd8
fuse-overlayfs@1.11-1.module+el8.8.0+18634+9a268292
github.com/opencontainers/runc@v1.1.5
libslirp@4.4.0-1.module+el8.8.0+18060+3f21f2cc
runc@1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
skopeo@2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c
slirp4netns@1.2.0-2.module+el8.8.0+18060+3f21f2cc
2:1-71.module+el8.9.0+21243+a586538b
0:3.18-4.module+el8.9.0+21243+a586538b
0:1.12-1.module+el8.9.0+21243+a586538b
1.1.12
0:4.4.0-1.module+el8.9.0+21243+a586538b
1:1.1.12-1.module+el8.9.0+21243+a586538b
2:1.13.3-3.module+el8.9.0+21243+a586538b
0:1.2.1-1.module+el8.9.0+21243+a586538b

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

6,921
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/postgres:13.11-bullseye5c265bf1fd30
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

15,380
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/opencontainers/runc@v1.1.4
1.1.12

Open the chart page →

1,926
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/opencontainers/runc@v1.1.9
1.1.12

Open the chart page →

7,571
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

29,033
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

12,992
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/opencontainers/runc@v1.1.5
1.1.12
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/opencontainers/runc@v1.1.5
1.1.12
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

32,902
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
postgis/postgis:15-3.3a2fc46b52819
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

7,459
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,055
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
eclipseaerios/openldap:2.6.30208743f315e
github.com/opencontainers/runc@v1.1.0
1.1.12

Open the chart page →

7,534
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/opencontainers/runc@v1.1.5
1.1.12

Open the chart page →

23,685
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

5,107
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

32,205
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

27,096
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21626.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.12

Open the chart page →

27,721

Container images carrying it

159 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.12
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/opencontainers/runc@v1.1.7
1.1.12
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/opencontainers/runc@v1.1.2
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
github.com/opencontainers/runc@v1.1.7
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/opencontainers/runc@v1.1.4
1.1.12
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.