CLEANSTART-2024-EX75667

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-EX75667.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2024-EX75667
Upstream
Published
2026-10-31T14:05:54Z
Modified
2026-10-31T16:00:31Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers
Details

Security vulnerability affects the podman package. A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.

References

Affected packages

CleanStart / podman

Package

Name
podman
Purl
pkg:apk/cleanstart/podman

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.9.4-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-EX75667.json"