Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2023-1682" }