Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

Fix availableCritical · CVSS 9.9EPSS 0.47%

Published Oct 2, 2026 · updated Oct 2, 2026

What to do

  1. Upgrade to a fixed version: gitea.com/gitea/runner 1.0.9-0.20260731160927-34bfa1915022.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Gogitea.com/gitea/runner

Vulnerable versions
< 1.0.9-0.20260731160927-34bfa1915022
Fixed in
1.0.9-0.20260731160927-34bfa1915022

Check your project: go list -m all | grep gitea.com/gitea/runner

Sources

CWE-269 Improper Privilege Management

← All critical vulnerabilities