Start for Free
go

github.com/containers/podman/v3

View on go registry
23 Total advisories
23 Vulnerabilities
0 Malware

Dependency scanning

Check whether github.com/containers/podman/v3 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 5.3
Go

CVE-2026-55686

Podman: WORKDIR symlink traversal vulnerability
UNKNOWN
Go

CVE-2026-94603

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman
HIGH 7.5
Go

CVE-2026-57231

Podman: Malformed Image can trick podman run into leaking host environment variables into the container
UNKNOWN
Go

CVE-2026-57231

Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod
UNKNOWN
Go

CVE-2026-19730

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman
MEDIUM 4.8
Go

CVE-2024-3056

Podman vulnerable to memory-based denial of service
MEDIUM 4.7
Go

CVE-2024-9407

Improper Input Validation in Buildah and Podman
HIGH 8.8
Go

CVE-2022-1227

Podman publishes a malicious image to public registries
UNKNOWN
Go

CVE-2026-55686

Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman
UNKNOWN
Go

CVE-2026-33414

PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman
UNKNOWN
Go

CVE-2018-10856

Podman Elevated Container Privileges in github.com/containers/podman
UNKNOWN
Go

CVE-2019-18466

Podman Symlink Vulnerability in github.com/containers/libpod
UNKNOWN
Go

CVE-2022-4122

Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
UNKNOWN
Go

CVE-2021-4024

Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman
UNKNOWN
Go

CVE-2022-27649

Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman
UNKNOWN
Go

CVE-2025-9566

podman kube play symlink traversal vulnerability in github.com/containers/podman
UNKNOWN
Go

CVE-2025-4953

Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman
HIGH 7.1
Go

CVE-2022-2989

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
UNKNOWN
Go

CVE-2024-3056

Podman vulnerable to memory-based denial of service in github.com/containers/podman
UNKNOWN
Go

CVE-2024-9407

Improper Input Validation in Buildah and Podman in github.com/containers/buildah
UNKNOWN
Go

CVE-2025-6032

Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman
MEDIUM 6.5
Go

CVE-2021-4024

Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman
MEDIUM 5.9
Go

CVE-2021-20199

Podman Origin Validation Error

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes