Vulnerabilidades do Red Hat Red Hat Build of Podman Desktop
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Red Hat Build of Podman Desktop: 2 registro(s), com versões afetadas e correções.
CVE-2026-114236
Baixa · 3.3
CWE-772 21/10/2026
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
CVE-2026-107935
Crítica · 9.3
CWE-22 09/10/2026
Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.