github.com/containers/podman/v5
Page établie d’après les avis qui citent ce paquet : ses métadonnées de registre (versions, licence, dépendances) n’ont pas encore été récupérées par ce service.
En bref
- Écosystème
- Go
- État de vulnérabilité
- touchée par 2 avis
Avis (20)
| Avis | Versions affectées | Dernière version |
|---|---|---|
| GHSA-4hq8-gpf5-8p68 Podman: Malformed Image can trick podman run into leaking host environment variables into the container | < 5.8.4 | Indéterminé |
| GHSA-65gg-3w2w-hr4h Podman Improper Certificate Validation; machine missing TLS verification | < 5.5.2 | Indéterminé |
| GHSA-874v-pj72-92f3 Podman affected by CVE-2024-1753 container escape at build time | < 5.0.1 | Indéterminé |
| GHSA-fhqq-8f65-5xfc Improper Input Validation in Buildah and Podman | < 5.2.4 | Indéterminé |
| GHSA-fx76-2j3w-2mx6 podman quadlet install --replace does not fully replace the old file | 5.7.0 – < 5.8.6 | Indéterminé |
| GHSA-hc8w-h2mf-hp59 PowerShell Command Injection in Podman HyperV Machine | < 5.8.2 | Indéterminé |
| GHSA-m68q-4hqr-mc6f Podman Creates Temporary File with Insecure Permissions | ≤ 5.5.0 | Indéterminé |
| GHSA-q6r4-3wmg-fwcq Podman: WORKDIR symlink traversal vulnerability | < 5.7.1 | Indéterminé |
| GHSA-rpcc-p8xm-rc6p Podman vulnerable to memory-based denial of service | ≤ 5.2.0 | Indéterminé |
| GHSA-wp3j-xq48-xpjw podman kube play symlink traversal vulnerability | < 5.6.1 | Indéterminé |
| GO-2024-3042 Podman vulnerable to memory-based denial of service in github.com/containers/podman | * | Affectée |
| GO-2024-3169 Improper Input Validation in Buildah and Podman in github.com/containers/buildah | < 5.2.4 | Indéterminé |
| GO-2025-3777 Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman | < 5.5.2 | Indéterminé |
| GO-2025-3935 podman kube play symlink traversal vulnerability in github.com/containers/podman | < 5.6.1 | Indéterminé |
| GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman | * | Affectée |
| GO-2026-5421 PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman | < 5.8.2 | Indéterminé |
| GO-2026-5568 Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman | < 5.7.1 | Indéterminé |
| GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman | 5.7.0 – < 5.8.6 | Indéterminé |
| GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod | < 5.8.4 | Indéterminé |
| GO-2026-6770 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman | < 5.8.8 | Indéterminé |
Sources
| Source | Licence |
|---|