GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kyverno-fips, cg, trivy, rootlesskit, zot, argo-events-fips, buildah, tigera-operator, zitadel, coder, drone-fips, prometheus-elasticsearch-exporter, flux-kustomize-controller, crossplane-provider-azure-managedidentity, docker, backup-restore-operator, nerdctl,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, crossplane-provider-aws-osis-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, flux-kustomize-controller, docker, scorecard, crossplane-provider-aws-dynamodb, pulumi-language-dotnet,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, crossplane-provider-aws-osis-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, flux-kustomize-controller, docker, scorecard, crossplane-provider-aws-dynamodb, pulumi-language-dotnet,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kyverno-fips, zot, buildah, tigera-operator, zitadel, prometheus-elasticsearch-exporter, nerdctl, backup-restore-operator, omnictl-multiarch-fips, frankenphp-8.2, docker-cli-buildx-fips, knative-kafka-broker-fips, gitlab-kas, kubernetes, knative-eventing-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: kyverno-fips, zot, buildah, tigera-operator, zitadel, prometheus-elasticsearch-exporter, nerdctl, backup-restore-operator, omnictl-multiarch-fips, frankenphp-8.2, docker-cli-buildx-fips, knative-kafka-broker-fips, gitlab-kas, kubernetes, knative-eventing-fips,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: fscrypt, kyverno, telegraf, kubernetes, rancher, kots, cloud-provider-aws, k3s, nerdctl, zot, helm, cilium, kaf, aactl, mattermost, gitlab-kas, kubernetes-dashboard, podman, kine, snyk-cli, external-dns, docker-cli-buildx, external-secrets-operator,...

CVE-2026-57231

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...

CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

UBUNTU-CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

UBUNTU-CVE-2026-57231

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...

CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

EUVD-2026-39808

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

CVE-2026-55686 Podman: WORKDIR symlink traversal vulnerability

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

CVE-2026-55686

Summary of CVE-2026-55686 (Podman: WORKDIR symlink traversal) Affects Podman versions 3.0.0 through 5.7.0 where a container image run with a crafted WORKDIR path that contains a symlink can cause a host filesystem change: create a directory or modify ownership. Ownership modification is less like...

CVE-2026-55686 Podman: WORKDIR symlink traversal vulnerability

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

CVE-2026-57231

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...

CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...

CVE-2026-57231

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...

CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...