PO
Product
Podman
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 7Low 1
Watch
Add Podman to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-25067 | 8.8 | Jun 9 | A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1 Affected: 1.5.1 |
| CVE-2022-1227 | 8.8 | Apr 29 | A privilege escalation flaw was found in Podman Affected: before 4.0.0 |
| CVE-2026-33414 | 7.8 | Apr 14 | PowerShell Command Injection in Podman HyperV Machine Affected: 4.8.0 before 5.8.2 |
| CVE-2024-3056 | 7.7 | Aug 2 | A flaw was found in Podman Affected: through 5.2.0 |
| CVE-2026-57231 | 7.5 | Jun 26 | Podman: Malformed Image can trick podman run into leaking host environment variables into the container Affected: 1.8.1 before 5.8.4; 6.0.0 |
| CVE-2022-2738 | 7.5 | Sep 1 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945,… Affected: 1.6.4-32.el7_9 |
| CVE-2022-27649 | 7.5 | Apr 4 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions Affected: before 4.0.3 |
| CVE-2022-2989 | 7.1 | Sep 13 | An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker… Affected: All versions, or not specified |
| CVE-2021-20188 | 7.0 | Feb 11 | A flaw was found in podman before 1.7.0 Affected: before 1.7.0 |
| CVE-2023-0778 | 6.8 | Mar 27 | A Time-of-check Time-of-use (TOCTOU) flaw was found in podman Affected: All versions, or not specified |
| CVE-2021-4024 | 6.5 | Dec 23 | A flaw was found in podman Affected: 3.3.0 before 3.4.3 |
| CVE-2021-20199 | 5.9 | Feb 2 | Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts) Affected: 1.8.0 before 3.0.0 |
| CVE-2026-55686 | 5.3 | Jun 26 | Podman: WORKDIR symlink traversal vulnerability Affected: 3.0.0 before 5.7.1 |
| CVE-2022-4122 | 5.3 | Dec 8 | A vulnerability was found in buildah Affected: 4.3.0 |
| CVE-2022-2739 | 5.3 | Sep 1 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370,… Affected: 1.6.4-32.el7_9 |
| CVE-2020-14370 | 5.3 | Sep 23 | An information disclosure vulnerability was found in containers/podman in versions before 2.0.5 Affected: before 2.0.5 |
| CVE-2022-4123 | 3.3 | Dec 8 | A flaw was found in Buildah Affected: 4.1.0; 4.1.0; 4.1.0; 4.1.1; 4.2.0; 4.2.0; +4 more |
Showing 17