Skip to content
OpenAdvisories

Package · Go

github.com/containers/libpod

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Podman: Malformed Image can trick podman run into leaking host environment variables into the container

    Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse…

  • High 7.0

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …