Security
فارسی
All products

github.com/containers/podman

Go · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Podman: WORKDIR symlink traversal vulnerabilityCVE-2026-55686 · GHSA-Q6R4-3WMG-FWCQVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat Medium Fix reported
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationCVE-2026-94603 · GHSA-2CVF-WQM6-WR9GVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat Critical Fix reported
podman kube play symlink traversal vulnerabilityCVE-2025-9566 · GHSA-WP3J-XQ48-XPJWVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go High Fix reported
podman quadlet install --replace does not fully replace the old fileCVE-2026-19730 · GHSA-FX76-2J3W-2MX6Version ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go Medium Fix reported
Podman: Malformed Image can trick podman run into leaking host environment variables into the containerCVE-2026-57231 · GHSA-4HQ8-GPF5-8P68Version ranges need review. github.com/containers/libpodgithub.com/containers/podman/v2 GoRed Hat High Fix reported
PowerShell Command Injection in Podman HyperV MachineCVE-2026-33414 · GHSA-HC8W-H2MF-HP59Version ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go Medium Fix reported
Podman vulnerable to memory-based denial of serviceCVE-2024-3056 · GHSA-RPCC-P8XM-RC6PVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat High No fix reported
Podman Creates Temporary File with Insecure PermissionsCVE-2025-4953 · GHSA-M68Q-4HQR-MC6FVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go High No fix reported
Podman Improper Certificate Validation; machine missing TLS verificationCVE-2025-6032 · GHSA-65GG-3W2W-HR4HVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat High Fix reported
Improper Input Validation in Buildah and PodmanCVE-2024-9407 · GHSA-FHQQ-8F65-5XFCVersion ranges need review. github.com/containers/buildahgithub.com/containers/podman/v2 GoRed Hat Medium Fix reported
Podman's default inheritable capabilities for linux container not emptyCVE-2022-27649 · GHSA-QVF8-P83W-V58JVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat High Fix reported
Podman Elevated Container PrivilegesCVE-2018-10856 · GHSA-WP7W-VX86-VJ9HVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go High Fix reported
Podman Symlink VulnerabilityCVE-2019-18466 · GHSA-R34V-GQMW-QVGJVersion ranges need review. github.com/containers/libpodgithub.com/containers/podman/v2 GoRed Hat Medium Fix reported
Podman Path Traversal Vulnerability leads to arbitrary file read/writeCVE-2019-10152 · GHSA-RH5F-2W6R-Q7VJVersion ranges need review. github.com/containers/podman Go High Fix reported
Podman has Files or Directories Accessible to External PartiesCVE-2020-1726 · GHSA-VMHJ-P9HW-VGRF github.com/containers/libpod/v2github.com/containers/libpod Go Medium Fix reported
Buildah (as part of Podman) vulnerable to Link FollowingCVE-2022-4122 · GHSA-4CRW-W8PW-2HMFVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podmanCVE-2021-4024 · GHSA-3CF2-X423-X582Version ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 Go Medium Fix reported