Security: termux/proot-distro
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Container Isolation Bypass via Crafted Restore Archive in proot-distroGHSA-7h3g-4w2f-fj2f published
Jun 10, 2026 by sylirreHigh -
Symlink Escape (Arbitrary Host File Write) in `proot-distro install` via Malicious Tar ArchiveGHSA-9xq3-3fqg-4vg7 published
Jun 8, 2026 by sylirreHigh -
Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container RootfsGHSA-mfr4-mq8w-vmg6 published
Jun 6, 2026 by sylirreModerate