THREATOPS
THREAT OPSThreat News › bubblewrap 0.12.0 fixes writes outside sandbox

bubblewrap 0.12.0 fixes writes outside sandbox

lowoss_secPublished 2026-08-27

<p>Posted by Simon McVittie on Aug 27</p>bubblewrap 0.12.0 fixes a security vulnerability<br /> involving symlink traversal during container setup:<br /> &lt;<a href="https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx" rel="nofollow">https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx</a>&gt;.<br /> A CVE ID has been requested but is not y

Original source: https://seclists.org/oss-sec/2026/q3/603