<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 14 Nov 2026 08:46:14 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-111433</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-111433</link>
      <description>&lt;p&gt;UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.&lt;/p&gt;
&lt;p&gt;This issue affects iSulad: through 2.1.6.&lt;/p&gt;
&lt;p&gt;If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.&lt;/p&gt;
&lt;p&gt;This issue affects iSulad: through 2.1.6.&lt;/p&gt;
&lt;p&gt;If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-111433</guid>
    </item>
    <item>
      <title>GHSA-cq33-2p3c-jp8p</title>
      <link>https://db.gcve.eu/vuln/ghsa-cq33-2p3c-jp8p</link>
      <description>&lt;p&gt;UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.&lt;/p&gt;
&lt;p&gt;This issue affects iSulad: through 2.1.6.&lt;/p&gt;
&lt;p&gt;If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.&lt;/p&gt;
&lt;p&gt;This issue affects iSulad: through 2.1.6.&lt;/p&gt;
&lt;p&gt;If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-cq33-2p3c-jp8p</guid>
    </item>
  </channel>
</rss>
