Go/github.com/containers/podman/v2 CVE-2026-19730: medium 4.2, EPSS 0.13%
podman quadlet install --replace does not fully replace the old file in github.com/containers/podman
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6588#Go/github.com/containers/podman/v2
- nvd: CVE-2026-19730
- https://github.com/podman-container-tools/podman/security/advisories/GHSA-fx76-2j3w-2mx6
- https://access.redhat.com/errata/RHSA-2026:69961
- https://access.redhat.com/errata/RHSA-2026:70201
- https://access.redhat.com/security/cve/CVE-2026-19730
- https://bugzilla.redhat.com/show_bug.cgi?id=2508234
- https://github.com/podman-container-tools/podman/commit/0ea4eaee70b7458bcc99d875529761faf5172651
- https://github.com/podman-container-tools/podman/commit/a38a9b7d20915c55e6f3c451101ae72d6da33742
- https://github.com/podman-container-tools/podman/commit/d3adfdeec7d5c9eee5a6978df3bee62a866c958d
- https://github.com/podman-container-tools/podman/commit/d4fe9154ec6e32a02d5fcd096c4a27c38f2040f4
- https://github.com/podman-container-tools/podman/issues/29013
- https://github.com/podman-container-tools/podman/pull/27980
- https://github.com/podman-container-tools/podman/releases/tag/v5.8.6
- https://github.com/podman-container-tools/podman/releases/tag/v6.0.0
CVE-2026-19730 · published · modified · JSON