VULN UPGRADE: github.com/opencontainers/selinux (minor → v1.13.1)

[campaigner-prod]

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

• . (go)

Updates

Package	From	To	Type	Vulnerabilities Fixed
github.com/opencontainers/selinux	v1.12.0	v1.13.1	minor	1 HIGH, 1 UNKNOWN

---

Security Details

🚨 Critical & High Severity (1 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
github.com/opencontainers/selinux	GHSA-cgrx-mc8f-2prm	HIGH	runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects	v1.12.0	1.13.0

ℹ️ Other Vulnerabilities (1)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
github.com/opencontainers/selinux	GO-2025-4098	unknown	Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc	v1.12.0	1.13.0

---

Review Checklist

Enhanced review recommended for this update:

• Review changes for compatibility with your code
• Check release notes for breaking changes
• Run integration tests to verify service behavior
• Test in staging environment before production
• Monitor key metrics after deployment

---

Update Mode: Vulnerability Remediation (High)

🤖 Generated by DataDog Automated Dependency Management System