How to Fix the New Docker BuildKit & runC Leaky Vessels Vulnerability

an open shipping container representing vulnerable container runtime environments BuildKit and runC

Recently, Snyk announced the emergence of 4 new container vulnerabilities collectively dubbed “Leaky Vessels.” These vulnerabilities exploit the runC and BuiltKit components of Docker container environments. While the Snyk team discovered that there are currently no active exploits, these vulnerabilities allow for container escapes, enabling a malicious attacker to gain access to the container host system.

Article Link: How to Fix the New Docker BuildKit & runC Leaky Vessels Vulnerability