⚠️ Dangerous runC flaws could allow hackers to escape Docker containers
｢ runC is a universal container runtime and the OCI reference implementation for running containers. It is responsible for low-level operations such as creating the container process, setting up namespaces, mounts, and cgroups that higher-level tools, like Docker and Kubernetes, can call ｣