- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 18 · 1 critical, 6 high, 6 medium
- Registry
- pkg.go.dev
Advisories 18
- CVE-2026-94603Critical 10.0
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Affected: all versions.
- CVE-2026-19730Medium 4.2
Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives
Affected: all versions.
- CVE-2026-55686Medium 5.3
Podman: WORKDIR symlink traversal vulnerability
Affected: through 3.4.7.
- CVE-2026-57231High 7.5
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Affected: through 3.4.7; all versions.
- CVE-2026-33414Medium 4.0
PowerShell Command Injection in Podman HyperV Machine
Affected: all versions.
- CVE-2025-4953High 7.4
Podman: build context bind mount
Affected: all versions.
- CVE-2025-9566High 8.1
Podman: podman kube play command may overwrite host files
Affected: all versions.
- CVE-2025-6032High 8.3
Podman: podman missing tls verification
Affected: all versions.
- CVE-2024-9407Medium 4.7
Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
Affected: fixed in 5.2.4; all versions.
- CVE-2024-3056High 7.7
Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack
Affected: through 5.2.0; all versions.
- CVE-2022-4122Medium 5.3
A vulnerability was found in buildah.
Affected: all versions.
- CVE-2022-2989High 7.1
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or…
Affected: fixed in 3.0.1.
- CVE-2022-1227Unrated
A privilege escalation flaw was found in Podman.
Affected: fixed in 3.4.
- CVE-2022-27649Unrated
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.
Affected: all versions.
- CVE-2021-4024Unrated
A flaw was found in podman.
Affected: fixed in 3.4.3.
Show all 18 advisoriesShow fewer advisories
- CVE-2021-20199Unrated
Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts).
Affected: fixed in 3.0.0.
- CVE-2019-18466Unrated
An issue was discovered in Podman in libpod before 1.6.0.
Affected: all versions.
- CVE-2018-10856Medium 5.3
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user.
Affected: all versions.