rhel10/buildah vulnerabilities

CVEs whose affected-version data names the rhel10/buildah package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-79705Medium· 4.5

1mo ago

A flaw was found in the buildah/copier Go package

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended de…

▾ SunlitRed Hat · podman-mainEPSS 0.41%via NVD