VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/containers/podman: vulnerability history, versions and safety

github.com/containers/podman is a package in the Go ecosystem. Vulert records 17 vulnerabilities for it across 120 releases, from May 2022 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
17 vulnerabilities recorded C1 H2 M1 U13
i
11 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
5 in the last 12 months

Most recent disclosure 19 Oct 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/containers/podman vulnerabilities

Vulert verdict on github.com/containers/podman v1.4.2 i

Updated on 23 Oct 2026

Careful: v1.4.2 has 15 known vulnerabilities, and 11 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100
  • Security Unfixed issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Active

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.4.2 — affected i
  • Vulnerabilities on record 17 over 4 years · 5 in the last year i
  • Latest disclosure 19 Oct 2026 i
  • Highest CVSS 10.0 i
  • With no published fix 11 i
  • Stars 33,085 i
  • OpenSSF scorecard 7/10 i
  • Last release 88 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/containers/podman, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.4.3-0.20200921202343-8ada832b3b70 21 Sep 2020 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20200210132651-fcf7fd91971c 10 Feb 2020 H2 U13 Apache-2.0 No Details →
v1.0.6-0.20200207113930-67ea29cb6189 07 Feb 2020 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20200206190657-8337cb370424 06 Feb 2020 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20200205134729-02f214ce8200 05 Feb 2020 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20191121133833-d6d5c4aa0255 21 Nov 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20191111212335-e2655dfee753 11 Nov 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-stable3 11 Nov 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20191111210008-01aa3cbb5186 11 Nov 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20191111205817-e01ca4912e10 11 Nov 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190913185349-b0b16bbea62f 13 Sep 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190912200046-fc10d7d55f97 12 Sep 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190911205156-43d6f9d23468 11 Sep 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190911161719-40e334b680d3 11 Sep 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190827205258-dba13352fe4f 27 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-stable2 27 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190827195444-01a1bee36040 27 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190827194651-b49ff958d5df 27 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190827194551-bbb1ba78d4da 27 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.6-0.20190814153021-02f7af9afc68 14 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.5 14 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.5-0.20190806003516-f98bed6e3c25 06 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.5-0.20190805224443-c1707f81c50f 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.4 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805195924-d46c7644cf63 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-stable1 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805185029-29c137ff6653 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805185029-44e229f24ea2 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805185029-da36c6b29b90 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805184028-7e0a6a57ef0d 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805184028-a682cd3814cb 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805184028-c115f4eca097 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190805180623-3b1ee6990c0e 05 Aug 2019 H2 U13 Apache-2.0 No Details →
v1.0.4-0.20190718222050-5cd5bd48c988 18 Jul 2019 H2 U13 Apache-2.0 No Details →
v1.0.3 18 Jul 2019 H2 U13 Apache-2.0 No Details →
v1.0.2 25 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.0.2-0.20190625170308-65fb42ad5564 25 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190624132603-de75b1a2778f 24 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190624081233-bd5e113b7133 24 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190623010550-7c4e4449b037 23 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190622100806-ddba0e6964e9 22 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190622022411-d9bdd3c1e006 22 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621232044-80440408addf 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621200039-c233a12772e5 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621190959-7d76548b419a 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621183829-e2b0587c210e 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621180002-00a7d2067e5e 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621151112-aa21ec158aff 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621141500-c0bc768ff131 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621124654-7d8aba924820 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621123655-54920601ae69 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190621010643-39fdf91ba696 21 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620201409-7e4d75eb8b74 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620193027-f65ddc099140 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620191629-afc461c9bdbc 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190620191428-df43bfe53dfa 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190620190746-7377870641c0 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620183226-484b4a7c4b26 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620141738-0106acbf7ea5 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620125232-fa1b0a2d891d 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620103023-00f266393ef6 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190620100304-3cf3ccbd776a 20 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190619211929-3d78085d52f3 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190619211415-fa0e48f21aaf 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190619184811-b4f9bc868e2f 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190619165005-47e2ad8ec37a 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190619153655-c211b3ff6a71 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190619144242-b015c9560a56 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190619141347-7be87f5551ca 19 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618233414-7eda299e9188 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.3-0.20190618232719-c225934726c0 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618214902-df9e3aa3dc4b 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618212103-f9bb91268d1a 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618210753-40eb0453adb8 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618154353-d87cb1a5f94e 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618152718-e22f91bd2808 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190618133801-dc4d20b5739d 18 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617194114-d6f436204f0c 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617193825-058c93f8505e 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617192633-bce4a9357523 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617192625-7d0e77de9498 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617150139-0003be1e0eab 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190617124829-0d341170d5df 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190617123155-04858a218f39 17 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190615210746-3db5cd67d4b0 15 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190615210712-7ae56aab46d6 15 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190615103754-b82c4e938458 15 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190614224205-7baa6b62666c 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190614221930-0cc87f28ece7 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.2-0.20190614221930-e0db4690aa1e 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190614175117-b7cbf93336af 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190614153716-e61117676034 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190614144336-d2d57517d7d2 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190614134619-74691738aa1d 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190614033439-d5f04e920bf0 14 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190613191917-b2bdbf331e50 13 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190613172109-ef9e0ec6cbda 13 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190613161240-031280cfe4ea 13 Jun 2019 H2 U13 Apache-2.0 No Details →
v1.4.1-0.20190613150320-7b7853d8c789 13 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190613133456-bcd95f9ddc9b 13 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190612195341-0084b04acab1 12 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190612143034-77d1cf0a3288 12 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190612091558-3bbb692d8072 12 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190612064912-d4681fafe553 12 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190611194030-f8a84fdcff12 11 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190611152646-f909b745ec82 11 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190611125303-bd0582dd3407 11 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190611115455-805d1d96fa69 11 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190610174531-013b897acee8 10 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190609061856-fcb7c14c5bb9 09 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190608124524-39f5ea4c040d 08 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190608105157-f6a2860b625a 08 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190607210625-bfc544f7e805 07 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190607205053-43dc5bb627be 07 Jun 2019 H2 U13 — No Details →
v1.4.1-0.20190607204951-7ce4036187ed 07 Jun 2019 H2 U13 — No Details →
v1.4.0 07 Jun 2019 H2 U13 — No Details →
v1.3.2-0.20190607200521-fe751a535b15 07 Jun 2019 H2 U13 — No Details →
v1.3.2-0.20190607191612-b2283de0b89c 07 Jun 2019 H2 U13 — No Details →

The newest 120 of 2,611 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 3
  • 2024 6
  • 2025 3
  • 2026 5

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 5 of the 17 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/containers/podman

The 5 most severe of 17 vulnerabilities recorded for this package

Search all 17 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2026-94603: Podman Container Checkpointing Vulnerability Leading to Sandbox Bypass 10.0 critical 5.8.8 15 Oct 2026
CVE-2018-10856: Podman Elevated Container Privileges 8.8 high 0.6.1 13 May 2022
CVE-2019-10152: Podman Path Traversal Vulnerability 7.2 high 1.4.0 24 May 2022
CVE-2020-1726: Podman Files or Directories Accessible to External Parties 5.9 medium 2.0.6 24 May 2022
CVE-2025-6032: Podman Improper Certificate Validation Vulnerability N/A unrated No fix published 28 Jul 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/containers/podman

Is github.com/containers/podman safe to use?

Vulert records 17 vulnerabilities for github.com/containers/podman in Go: 1 critical, 2 high, 1 medium and 0 low, plus 13 not yet rated. 11 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/containers/podman's Vulert package health score?

Vulert scores github.com/containers/podman 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/containers/podman affected?

Yes. v1.4.2, the version you would install today, has 15 known vulnerabilities, and 11 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/containers/podman should I use?

v1.4.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/containers/podman have?

17 vulnerabilities are recorded for github.com/containers/podman in the Go ecosystem: 1 critical, 2 high, 1 medium and 0 low, plus 13 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/containers/podman vulnerabilities disclosed?

5 vulnerabilities were recorded for github.com/containers/podman in the last 12 months, and the oldest entry in this database dates to 13 May 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/containers/podman are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/containers/podman for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/containers/podman version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.