Go/github.com/containers/podman/v3 CVE-2026-57231: high 7.5, EPSS 0.44%
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.4.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4hq8-gpf5-8p68#Go/github.com/containers/podman/v3
- https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68
- https://nvd.nist.gov/vuln/detail/CVE-2026-57231
- https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050
- https://github.com/podman-container-tools/podman
- https://github.com/podman-container-tools/podman/releases/tag/v5.8.4
- https://github.com/podman-container-tools/podman/releases/tag/v6.0.0
CVE-2026-57231 · published · modified · JSON