RunC Container Escape: What Docker and Kubernetes Users Need to Know
minimus.io
minimus.io
They don't clearly say the most important thing up-front which is "If you do not run untrusted images, then these vulnerabilities do not impact you, but you should still of course update asap"