podman vulnerabilities
2 known vulnerabilities in podman from Podman-container-tools. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest first
- 10.0 Critical severity
podman: Protection Mechanism Failure
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation rest
- 7.5 High severity
podman: Exposure of Sensitive Information to an Unauthorized Actor
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse