Containers vulnerabilities

Products

• Podman 19
• Crun 6
• Aardvark-dns 2
• Bubblewrap 2

Newest

• containers podman Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation CVE-2026-94603 Fix available 10.0 CriticalSeptember 30, 2026
• containers crun, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs CVE-2026-88264 Fix available 5.6 MediumSeptember 10, 2026
• containers fuse-overlayfs fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC) CVE-2026-52791 Fix available 2.0 LowJuly 29, 2026
• containers podman Podman: Malformed Image can trick podman run into leaking host environment variables into the container CVE-2026-57231 Fix available 7.5 HighJune 26, 2026
• containers podman Podman: WORKDIR symlink traversal vulnerability CVE-2026-55686 Fix available 5.3 MediumJune 18, 2026
• containers buildah Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive CVE-2026-44517 Fix available 6.3 MediumJune 16, 2026
• containers crun crun follows rootfs /dev symlink while creating default devices CVE-2026-47766 Fix available 5.1 MediumMay 28, 2026
• containers bubblewrap, red hat enterprise linux 10, enterprise linux 8 +2 more +4 more bubblewrap vulnerable to privilege escalation in setuid mode via ptrace CVE-2026-41163 Fix available 8.7 HighMay 4, 2026
• containers podman, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more PowerShell Command Injection in Podman HyperV Machine CVE-2026-33414 Fix available 4.0 MediumApril 14, 2026
• containers aardvark-dns Aardvark-dns has incorrect error handling for malformed tcp packets CVE-2026-35406 Fix available 6.2 MediumApril 7, 2026
• containers crun Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation CVE-2026-30892 Fix available 0.0 NoneMarch 25, 2026
• containers crun .krun_config.json symlink attack creates or overwrites file on the host in crun CVE-2025-24965 Fix available 8.5 HighFebruary 11, 2025
• containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 more Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library CVE-2024-9341 Fix available 5.4 MediumOctober 1, 2024
• containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 more Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service CVE-2024-8418 Fix available 7.5 HighSeptember 4, 2024
• containers podman, redhat enterprise linux +1 more Podman Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2023-0778 Fix available 6.8 MediumMarch 27, 2023
• containers podman, fedoraproject fedora +1 more Buildah (as part of Podman) vulnerable to Path Traversal CVE-2022-4123 Fix available 3.3 LowDecember 8, 2022
• containers podman, fedoraproject fedora +1 more Buildah (as part of Podman) vulnerable to Link Following CVE-2022-4122 Fix available 5.3 MediumDecember 8, 2022
• containers podman, redhat enterprise linux, openshift container platform +2 more Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification CVE-2022-2989 Fix available 7.1 HighSeptember 13, 2022
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2739 Fix available 5.3 MediumSeptember 1, 2022
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2738 Fix available 7.5 HighSeptember 1, 2022
• containers podman, varlink +1 more Podman/Varlink API Privilege Escalation CVE-2019-25067 Fix available 6.3 MediumJune 9, 2022
• containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 more Important: container-tools:rhel8 security, bug fix, and enhancement update CVE-2022-27650 Fix available 7.5 HighApril 4, 2022
• containers podman, fedoraproject fedora, redhat developer tools +11 more +13 more Podman's default inheritable capabilities for linux container not empty CVE-2022-27649 Fix available 7.5 HighApril 1, 2022
• containers podman, fedoraproject fedora, redhat enterprise linux +2 more Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman CVE-2021-4024 Fix available 6.5 MediumDecember 23, 2021
• containers podman Podman Origin Validation Error CVE-2021-20199 Fix available 5.9 MediumFebruary 2, 2021
• containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 more Information disclosure in podman CVE-2020-14370 Fix available 5.3 MediumSeptember 23, 2020
• containers podman, redhat enterprise linux, openshift container platform +2 more Improper Authorization in github.com/containers/libpod CVE-2021-20188 Fix available 7.0 HighJuly 21, 2020
• centos, containers bubblewrap, debian linux +1 more +3 more Privilege escalation in setuid mode via user namespaces in Bubblewrap CVE-2020-5291 Fix available 7.2 HighMarch 31, 2020
• containers podman, libpod project libpod, redhat enterprise linux +1 more +3 more Podman has Files or Directories Accessible to External Parties CVE-2020-1726 Fix available 5.9 MediumFebruary 11, 2020
• containers crun, fedoraproject fedora +1 more An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check... CVE-2019-18837 8.6 HighNovember 13, 2019
• containers podman, libpod project libpod, opensuse leap +2 more Podman Path Traversal Vulnerability leads to arbitrary file read/write CVE-2019-10152 Fix available 7.5 HighJuly 30, 2019
• [unknown] podman, libpod project libpod +1 more Podman Elevated Container Privileges CVE-2018-10856 Fix available 5.3 MediumJuly 2, 2018