Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Fix availableCritical · CVSS 10EPSS 0.92%

Published Oct 15, 2026 · updated Oct 15, 2026

What to do

  1. Upgrade to a fixed version: github.com/containers/podman 5.8.8, go.podman.io/podman/v6 6.1.3.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Gogithub.com/containers/podman

Vulnerable versions
>= 4.4.0, < 5.8.8
Fixed in
5.8.8

Check your project: go list -m all | grep github.com/containers/podman

Gogo.podman.io/podman/v6

Vulnerable versions
>= 6.0.0, < 6.1.3
Fixed in
6.1.3

Check your project: go list -m all | grep go.podman.io/podman/v6

Sources

CWE-693 Protection Mechanism Failure

← All critical vulnerabilities