https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-31214.htmlhttps://patchthecve.com/cve/CVE-2022-31214.htmlWed, 17 Jun 2026 04:45:08 +0000HIGH 7.8: A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespahttps://patchthecve.com/cve/CVE-2021-26910.htmlhttps://patchthecve.com/cve/CVE-2021-26910.htmlWed, 17 Jun 2026 03:43:59 +0000HIGH 7.8: Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.https://patchthecve.com/cve/CVE-2020-17368.htmlhttps://patchthecve.com/cve/CVE-2020-17368.htmlWed, 17 Jun 2026 02:58:48 +0000CRITICAL 9.8: Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.https://patchthecve.com/cve/CVE-2020-17367.htmlhttps://patchthecve.com/cve/CVE-2020-17367.htmlWed, 17 Jun 2026 02:58:48 +0000HIGH 7.8: Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.