pumba

Chaos testing tool for Docker, containerd, and Podman Quick Start · User Guide · Network Chaos · Deployment · Contributing Pumba is a chaos testing and network emulation tool for Docker, containerd, and Podman containers. Inspired by Netflix Chaos Monkey, Pumba brings chaos engineering to the...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: dive or you can dive with Docker directly: alias dive="docker run -ti --rm -v...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

container-cve-2021-22555

Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...

proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

podman security update

An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

RLSA-2026:88336 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667...

CVE-2026-47668

CVE-2026-47668 Unauthenticated RCE in DBGate = 7.1.8 REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py Minimal implementation of RCE on /runners/start, Privileged If process can write to ./public/ folder, file...

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

Important: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

php-vulnerability-checker-october-2026

PHP Vulnerability Checker October 2026 PHP Vulnerability Chec...

CVE-2026-24061

CVE-2026-24061 auth-bypass.py: a minimalist implementation of CVE-2026-24061 using UV + Python + telnetlib3 run.sh / shell.sh: builds and run an exploitable podman container on localhost:2323...

ALSA-2026:88336 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667...

podman security update

5.8.2-11.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-11 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287477...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.4-1.1.hum1 aarch64, s390x, x8664 podman-docker-6.1.4-1.1.hum1 noarch podman-machine-6.1.4-1.1.hum1 aarch64, x8664 podman-remote-6.1.4-1.1.hum1 aarch64, s390x, x8664...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...

CVE-2026-114236

The Podman container engine contains a resource leak in the storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer functions. When processing corrupt or malicious inputs, these functions may leak a file descriptor due to a goroutine-related issue. Unbounded repeated calls can lead to the exhau...

CVE-2026-114236 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit...