CVE-2016-10117 in Firejail
Summary
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.