Vendor
Podman Project
17 known vulnerabilities in products by Podman Project, 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-1227 | Psgo: Improper Preservation of Permissions | 8.8 | |
| High | CVE-2019-25067 | Podman/Varlink API Privilege Escalation | 6.3 | |
| High | CVE-2022-27649 | Podman: Incorrect Default Permissions | 7.5 | |
| High | CVE-2026-57231 | Podman: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2026-33414 | PowerShell Command Injection in Podman HyperV Machine | 7.8 | |
| Medium | CVE-2020-14370 | Podman: Improper Removal of Sensitive Information Before Storage or Transfer | 5.3 | |
| High | CVE-2022-2738 | Podman: Use After Free | 7.5 | |
| Medium | CVE-2021-4024 | Podman: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2026-55686 | Podman: WORKDIR symlink traversal vulnerability | 5.3 | |
| Medium | CVE-2021-20199 | Podman: Origin Validation Error | 5.9 | |
| High | CVE-2024-3056 | Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack | 7.7 | |
| Medium | CVE-2022-4122 | Podman: Link Following | 5.3 | |
| Medium | CVE-2023-0778 | Podman Project Podman: Time-of-check Time-of-use (TOCTOU) Race Condition | 6.8 | |
| Medium | CVE-2022-2739 | Podman: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2022-2989 | Podman: Placement of User into Incorrect Group | 7.1 | |
| High | CVE-2021-20188 | Podman: Incorrect Authorization | 7.0 | |
| Low | CVE-2022-4123 | Podman: Relative Path Traversal | 3.3 |
Products
| Podman Project Podman | 17 | 0 |