Bootc

A vulnerability in bootc allows for the execution of arbitrary unsigned container content as the host root filesystem due to insecure default signature policies.