AIKIDO-2024-10376

TL;DR

Affected versions of this package are vulnerable to path traversal. The containers/storage library improperly validates symlinks when attempting to read /etc/passwd inside the container, which allows an attacker to exploit this weakness and read arbitrary files on the host.