VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/containers/buildah · Version

github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a

v0.0.0-20260212191824-e27dd2f1563a is affected by 16 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: v1.43.1.

Critical 0 High 2 Medium 4 Low 0 Unrated 10

All github.com/containers/buildah versions & vulnerabilities → Source repository Search the database for this package →
Released 12 Feb 2026 Licence Apache-2.0 Also known from other sources 15 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a vulnerabilities

16 vulnerabilities cover github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2020-10696: Path Traversal in Buildah 8.8 high 1.14.4 18 May 2021
CVE-2022-2989: Buildah's Incorrect Handling of Supplementary Groups 7.1 high 1.27.1 14 Sep 2022
CVE-2022-27651: Non-empty default inheritable capabilities for linux container in Buildah 6.8 medium 1.25.0 01 Apr 2022
CVE-2021-3602: chroot isolation: environment value leakage to intermediate processes in github.com/containers/buildah 5.5 medium 1.16.8 19 Jul 2021
CVE-2024-9407: Improper Input Validation in Buildah and Podman 4.7 medium 1.37.4 01 Oct 2024
CVE-2024-9675: Buildah Arbitrary Directory Mount Vulnerability 4.4 medium 1.38.0 09 Oct 2024
CVE-2024-11218: Buildah Package Vulnerability Leading to Build Breakout N/A unrated 1.33.12 28 Jan 2025
CVE-2024-9675: Buildah Arbitrary Directory Mount Vulnerability N/A unrated 1.37.1 11 Oct 2024
CVE-2024-9407: Improper Input Validation in Buildah and Podman N/A unrated 1.37.4 09 Oct 2024
CVE-2020-10696: Path Traversal in Buildah in github.com/containers/buildah N/A unrated 1.14.4 21 Aug 2024
CVE-2024-1753: Container escape at build time in github.com/containers/buildah N/A unrated 1.35.1 22 Mar 2024
CVE-2022-2990: Buildah's incorrect handling of supplementary groups may lead to data disclosure, modification N/A unrated 1.27.1 21 Sep 2022
CVE-2022-2990: Unauthorized file access in github.com/containers/buildah N/A unrated 1.27.1 21 Sep 2022
CVE-2021-3602: Environment variable leakage in github.com/containers/buildah N/A unrated 1.22.0 15 Jul 2022
CVE-2022-27651: Non-empty default inheritable capabilities for linux container in Buildah N/A unrated 1.25.0 01 Jul 2022
CVE-2022-27651: Incorrect default permissions in github.com/containers/buildah N/A unrated 1.25.0 01 Jul 2022

Looking for another version, or everything Vulert holds for github.com/containers/buildah?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a

Is github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a vulnerable?

Yes. 16 vulnerabilities in the Vulert database cover github.com/containers/buildah v0.0.0-20260212191824-e27dd2f1563a: 0 critical, 2 high, 4 medium and 0 low, plus 10 not yet rated. The upgrade Vulert recommends is v1.43.1, and each entry above names the fixed version to move to.

Which version of github.com/containers/buildah should I use instead of v0.0.0-20260212191824-e27dd2f1563a?

v1.43.1 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is v0.0.0-20260212191824-e27dd2f1563a the latest release of github.com/containers/buildah?

No. v0.0.0-20260212191824-e27dd2f1563a was published 12 Feb 2026, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor github.com/containers/buildah for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/containers/buildah version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.