{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.9.5"}],"component":"github.com/containers/podman/v4","cve_ids":["CVE-2025-9566"],"ecosystem":"Go","epss":0.01159,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wp3j-xq48-xpjw","id":"tcs_01M5KFQXB03TBPZ8VHTDWAWVF8","modified_at":"2026-09-28T03:45:09.549539910Z","published_at":"2025-09-04T20:01:54Z","references":["https://osv.dev/vulnerability/GHSA-wp3j-xq48-xpjw","https://github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjw","https://nvd.nist.gov/vuln/detail/CVE-2025-9566","https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89","https://access.redhat.com/errata/RHSA-2025:19002","https://access.redhat.com/errata/RHSA-2025:19041","https://access.redhat.com/errata/RHSA-2025:19046","https://access.redhat.com/errata/RHSA-2025:19094","https://access.redhat.com/errata/RHSA-2025:19894","https://access.redhat.com/errata/RHSA-2025:20909","https://access.redhat.com/errata/RHSA-2025:20983","https://access.redhat.com/errata/RHSA-2026:18289","https://access.redhat.com/errata/RHSA-2026:18722","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:8211","https://access.redhat.com/security/cve/CVE-2025-9566","https://bugzilla.redhat.com/show_bug.cgi?id=2393152","https://github.com/containers/podman","https://access.redhat.com/errata/RHBA-2025:15692","https://access.redhat.com/errata/RHBA-2025:15712","https://access.redhat.com/errata/RHBA-2025:16158","https://access.redhat.com/errata/RHBA-2025:16163","https://access.redhat.com/errata/RHEA-2025:4782","https://access.redhat.com/errata/RHSA-2025:15900","https://access.redhat.com/errata/RHSA-2025:15901","https://access.redhat.com/errata/RHSA-2025:15904","https://access.redhat.com/errata/RHSA-2025:16480","https://access.redhat.com/errata/RHSA-2025:16481","https://access.redhat.com/errata/RHSA-2025:16482","https://access.redhat.com/errata/RHSA-2025:16488","https://access.redhat.com/errata/RHSA-2025:16515","https://access.redhat.com/errata/RHSA-2025:16724","https://access.redhat.com/errata/RHSA-2025:17669","https://access.redhat.com/errata/RHSA-2025:18217","https://access.redhat.com/errata/RHSA-2025:18218","https://access.redhat.com/errata/RHSA-2025:18240"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-wp3j-xq48-xpjw#Go/github.com/containers/podman/v4","url":"https://osv.dev/vulnerability/GHSA-wp3j-xq48-xpjw"}],"summary":"podman kube play symlink traversal vulnerability"}