Skip to content
OpenAdvisories

Package · Wolfi

podman-6.0

24 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.0

    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…

  • Low 2.3

    BuildKit: Possible runtime DoS via unbounded group parsing

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a u…