Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

exec

package

Go to main page

Versions in this module

v3

v3.4.7

Apr 20, 2022 GO-2022-0416 +12 more

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.6

Apr 13, 2022 GO-2022-0416 +12 more

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.5

Apr 12, 2022 GO-2022-0416 +12 more

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.4

Dec 8, 2021 GO-2022-0416 +12 more

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.3

Dec 6, 2021 GO-2022-0416 +12 more

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.2

Nov 12, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.1

Oct 19, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.0

Sep 30, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.0-rc2

Sep 22, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.4.0-rc1

Sep 16, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.3.1

Aug 30, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.3.0

Aug 20, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.3.0-rc3

Aug 17, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.3.0-rc2

Aug 12, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.3.0-rc1

Aug 2, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.3

Jul 16, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.2

Jun 25, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.1

Jun 14, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.0

Jun 3, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.0-rc3

May 26, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.0-rc2

May 20, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.2.0-rc1

May 5, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.1.2

Apr 21, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.1.1

Apr 16, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.1.0

Mar 29, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.1.0-rc2

Mar 23, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.1.0-rc1

Mar 8, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

v3.0.2

May 16, 2022 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

Changes in this version

+ const DefaultPostKillTimeout

+ func Run(ctx context.Context, hook *rspec.Hook, state []byte, stdout io.Writer, ...) (hookErr, err error)

+ func RuntimeConfigFilter(ctx context.Context, hooks []spec.Hook, config *spec.Spec, ...) (hookErr, err error)

v3.0.1-rhel

Jun 1, 2021 GO-2022-0281 +13 more

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

Other modules containing this package

github.com/containers/podman

github.com/containers/podman/v2

github.com/containers/podman/v4