Threats Tagged 'ghsa-x4q3-gcj3-m6cf'
View all threats tagged with 'ghsa-x4q3-gcj3-m6cf'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-x4q3-gcj3-m6cf'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in gitea.com/gitea/runner (CVE-2026-73802) allows workflow authors to pass Docker container options that preserve host namespaces and capability flags even when privileged mode is disabled. This enables execution of commands as root on the runner host by entering host PID/IPC namespaces. The flaw affects versions prior to 1.0.9-0.20260731160927-34bfa1915022. The issue is critical for shared runners where untrusted users can submit workflows and high severity for single-tenant runners relying on privileged mode disabling as a security control. A fix is available that involves rejecting or stripping unsafe container options when privileged mode is disabled. Join the discussion | GCVE Database | 10/02/2026, 23:18:12 UTC Added: 10/03/2026, 17:21:44 UTC |
Showing 1 to 1 of 1 result