Affected by GO-2024-3042 and 4 other vulnerabilities

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/containers/podman

Links

Open Source Insights

Directories ¶

Path	Synopsis
annotations
api
handlers
handlers/compat
handlers/libpod
handlers/swagger Package swagger defines the payloads used by the Podman API	Package swagger defines the payloads used by the Podman API
handlers/types
handlers/utils
handlers/utils/apiutil
server Package server supports a RESTful API for the Libpod library	Package server supports a RESTful API for the Libpod library
server/idle
types
auth
autoupdate
bindings
containers Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
generate Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
images Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
internal/util
kube Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
manifests Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
network Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
play
pods Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
secrets Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
system Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
volumes Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
channel Package channel provides helper structs/methods/funcs for working with channels	Package channel provides helper structs/methods/funcs for working with channels
checkpoint
crutils
copy
criu
ctime Package ctime includes a utility for determining file-creation times.	Package ctime includes a utility for determining file-creation times.
domain
entities
entities/reports
entities/types copied from github.com/docker/docker/api/types	copied from github.com/docker/docker/api/types
filters
infra
infra/abi
infra/abi/internal/expansion
infra/abi/parse
infra/abi/terminal
infra/tunnel
utils
emulation
env Package for processing environment variables.	Package for processing environment variables.
errorhandling
farm
fileserver
plan9
inspect
k8s.io
api/apps/v1
api/core/v1
apimachinery/pkg/api/resource
apimachinery/pkg/apis/meta/v1 Package v1 contains API types that are common to all versions.	Package v1 contains API types that are common to all versions.
apimachinery/pkg/types
apimachinery/pkg/util/intstr
lookup
machine
applehv
applehv/vfkit
compression
connection
define
env
hyperv
hyperv/vsock
ignition
lock
ocipull
os
ports
provider
proxyenv
qemu
qemu/command
shim
shim/diskpull
sockets
stdpull
vmconfigs
wsl
wsl/wutil
namespaces
parallel
ctr
ps
define
rootless
seccomp
selinux
signal Signal handling for Linux only.	Signal handling for Linux only.
specgen
generate
generate/kube
specgenutil
specgenutilexternal
systemd
define
generate
notifyproxy
parser
quadlet
terminal
timetype
trust
util
camelcase Package camelcase is a micro package to split the words of a camelcase type string into a slice of words.	Package camelcase is a micro package to split the words of a camelcase type string into a slice of words.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL