Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:umoci:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLinuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234)
ProductUmoci (3e36394c-931d-52cc-96a2-a15e367655d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/umoci purl2cpe 2026-06-01 10:13:23.058134
pkg:deb/ubuntu/umoci purl2cpe 2026-06-01 10:13:23.058137
pkg:github/opencontainers/umoci purl2cpe 2026-06-01 10:13:23.058140
pkg:github/opensuse/umoci purl2cpe 2026-06-01 10:13:23.058143
pkg:rpm/opensuse/umoci purl2cpe 2026-06-01 10:13:23.058146

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29136 vulnerable 2026-06-08 05:31:25.876066 Details available
Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.
Published: 2021-04-06T15:57:49.000Z
Updated: 2024-08-03T22:02:50.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.