Most recent entries from all

bdu:2025-12234

cnvd-2022-85535

EUVD-2026-232914

fkie_cve-2022-4122

A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.

GHSA-4crw-w8pw-2hmf — Buildah (as part of Podman) vulnerable to Link Following

Affected: Go: github.com/containers/podman/v4

A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.

gsd-2022-4122

RHSA-2024:2077 — Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

podman: Symlink error leads to information disclosure golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags buildah: Buildah: Container escape via improper bind mount validation

RHSA-2024:9102 — Red Hat Security Advisory: podman security update

podman: Symlink error leads to information disclosure containers/image: digest type does not guarantee valid type golang: archive/zip: Incorrect handling of certain ZIP files net/http: Denial of service due to improper 100-continue handling in net/http

UBUNTU-CVE-2022-4122

Affected: Ubuntu:22.04:LTS: golang-github-containers-buildah, Ubuntu:Pro:24.04:LTS: golang-github-containers-buildah, Ubuntu:25.10: golang-github-containers-buildah, Ubuntu:Pro:26.04:LTS: golang-github-containers-buildah

A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.