Skip to content
OpenAdvisories

Package · Go

go.podman.io/podman/v6

2 known vulnerabilities.

2 results · Feed

  • Critical 10.0

    Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

    Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation res…

  • High 7.5

    Podman: Malformed Image can trick podman run into leaking host environment variables into the container

    Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse…