A critical flaw in runwasi versions before 0.6.1 lets attackers bypass WebAssembly validation and execute native code within the container shim process.
Amazon Web Services has published advisories for five CVEs in the containerd CRI plugin, urging users to assess their exposure to potential container escapes.