{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/containers/podman/v2","cve_ids":["CVE-2026-19730"],"ecosystem":"Go","epss":0.0013,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fx76-2j3w-2mx6","id":"tcs_01M5KGVMBWABEWE95YKAFWTN7Q","modified_at":"2026-10-01T20:45:14.987114752Z","published_at":"2026-10-01T20:23:38Z","references":["https://osv.dev/vulnerability/GO-2026-6588","https://github.com/podman-container-tools/podman/security/advisories/GHSA-fx76-2j3w-2mx6","https://nvd.nist.gov/vuln/detail/CVE-2026-19730","https://access.redhat.com/errata/RHSA-2026:69961","https://access.redhat.com/errata/RHSA-2026:70201","https://access.redhat.com/security/cve/CVE-2026-19730","https://bugzilla.redhat.com/show_bug.cgi?id=2508234","https://github.com/podman-container-tools/podman/commit/0ea4eaee70b7458bcc99d875529761faf5172651","https://github.com/podman-container-tools/podman/commit/a38a9b7d20915c55e6f3c451101ae72d6da33742","https://github.com/podman-container-tools/podman/commit/d3adfdeec7d5c9eee5a6978df3bee62a866c958d","https://github.com/podman-container-tools/podman/commit/d4fe9154ec6e32a02d5fcd096c4a27c38f2040f4","https://github.com/podman-container-tools/podman/issues/29013","https://github.com/podman-container-tools/podman/pull/27980","https://github.com/podman-container-tools/podman/releases/tag/v5.8.6","https://github.com/podman-container-tools/podman/releases/tag/v6.0.0"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GO-2026-6588#Go/github.com/containers/podman/v2","url":"https://osv.dev/vulnerability/GO-2026-6588"},{"source":"nvd","source_id":"CVE-2026-19730","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19730"}],"summary":"podman quadlet install --replace does not fully replace the old file in github.com/containers/podman"}