github.com/containers/podman/v4
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Go
- Vulnerability status
- affected by 9 advisory(ies)
Advisories (30)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-4crw-w8pw-2hmf Buildah (as part of Podman) vulnerable to Link Following | < 4.5.0 | Undetermined |
| GHSA-4hq8-gpf5-8p68 Podman: Malformed Image can trick podman run into leaking host environment variables into the container | ≤ 4.9.5 | Undetermined |
| GHSA-4wjj-jwc9-2x96 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification | < 4.2.0 | Undetermined |
| GHSA-65gg-3w2w-hr4h Podman Improper Certificate Validation; machine missing TLS verification | 4.8.0 – 4.9.5 | Undetermined |
| GHSA-874v-pj72-92f3 Podman affected by CVE-2024-1753 container escape at build time | < 4.9.4 | Undetermined |
| GHSA-fhqq-8f65-5xfc Improper Input Validation in Buildah and Podman | < 5.2.4 | Undetermined |
| GHSA-hc8w-h2mf-hp59 PowerShell Command Injection in Podman HyperV Machine | 4.8.0 – 4.9.5 | Undetermined |
| GHSA-q6r4-3wmg-fwcq Podman: WORKDIR symlink traversal vulnerability | ≤ 4.9.5 | Undetermined |
| GHSA-qvf8-p83w-v58j Podman's default inheritable capabilities for linux container not empty | < 4.0.3 | Undetermined |
| GHSA-qwqv-rqgf-8qh8 Podman Time-of-check Time-of-use (TOCTOU) Race Condition | < 4.4.2 | Undetermined |
| GHSA-r34v-gqmw-qvgj Podman Symlink Vulnerability | < 1.6.0 | Undetermined |
| GHSA-rpcc-p8xm-rc6p Podman vulnerable to memory-based denial of service | ≤ 5.2.0 | Undetermined |
| GHSA-rprg-4v7q-87v7 Buildah (as part of Podman) vulnerable to Path Traversal | 4.1.0-rc1 – 4.4.1 | Undetermined |
| GHSA-wp3j-xq48-xpjw podman kube play symlink traversal vulnerability | ≤ 4.9.5 | Undetermined |
| GO-2022-0416 Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman | < 4.0.3 | Undetermined |
| GO-2022-1151 Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman | < 4.5.0 | Undetermined |
| GO-2022-1159 Path traversal in github.com/containers/podman/v4 | ≥ 4.1.0-rc1 | Undetermined |
| GO-2023-1681 Time-of-check time-of-use race condition in github.com/containers/podman/v4 | < 4.4.2 | Undetermined |
| GO-2023-1942 Podman Symlink Vulnerability in github.com/containers/libpod | * | Affected |
| GO-2023-1962 Podman Elevated Container Privileges in github.com/containers/podman | * | Affected |
| GO-2024-3042 Podman vulnerable to memory-based denial of service in github.com/containers/podman | * | Affected |
| GO-2024-3169 Improper Input Validation in Buildah and Podman in github.com/containers/buildah | * | Affected |
| GO-2025-3777 Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman | ≥ 4.8.0 | Undetermined |
| GO-2025-3935 podman kube play symlink traversal vulnerability in github.com/containers/podman | * | Affected |
| GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman | * | Affected |
| GO-2026-5421 PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman | ≥ 4.8.0 | Undetermined |
| GO-2026-5568 Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman | * | Affected |
| GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman | * | Affected |
| GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod | * | Affected |
| GO-2026-6770 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman | ≥ 4.4.0 | Undetermined |
Sources
| Source | Licence |
|---|