CVE-2024-21626: A container working directory points into its host

An isolated build container resolves its working directory outside the container root filesystem. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Team workspace / us-east. Investigate host, restore service, and verify the result.