| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/opencontainers/runc | all versions |
(This report has been withdrawn with reason: "Does not affect Go code."). https://nvd.nist.gov/vuln/detail/CVE-2025-27612 lists https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66 which caused automation to flag as Go; the affected repo is https://github.com/youki-dev/youki (Rust).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free