containers crun
- CVE-2026-88264 Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 0.1%
- CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices 0.2%
- CVE-2026-30892 Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.2%
- CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun 0.6%