containers has 11 CVEs on record between 2021 and 2026. 2 were published in the last 90 days. The median CVSS is 6.8 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-59 (3). Most affected products: github.com/containers/buildah (4), github.com/containers/podman/v4 (2), aardvark-dns (1).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 6.8
Publish → KEV: —
Last 90 days: 2 prev 1

Weakness classes

Products

github.com/containers/buildah 4
github.com/containers/podman/v4 2
aardvark-dns 1
common 1
crun 1
github.com/containers/podman/v3 1

Follow containers:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

containers vulnerabilities

CVEs affecting containers, newest first. Open any entry for full detail, references, and exploit status.

11 CVEsRSS

CVE-2026-88264Medium· 5.6

1mo ago

A flaw was found in crun

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected …

▾ Sunlitcontainers · crunEPSS 0.12%via NVD

CVE-2026-44517Medium· 6.3

2mo ago

Buildah is a tool that facilitates building OCI images

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirector…

▾ Sunlitcontainers · github.com/containers/buildahEPSS 0.18%via NVD

CVE-2026-55686Medium· 5.3

4mo ago

Podman: WORKDIR symlink traversal vulnerability

▾ Sunlitcontainers · github.com/containers/podman/v5EPSS 0.40%via GHSA

CVE-2025-6032High· 8.3

1y ago

A flaw was found in Podman

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

▾ Twilightcontainers · github.com/containers/podman/v4EPSS 0.52%via NVD

CVE-2024-11218High· 8.6

1y ago

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it …

▾ Twilightcontainers · github.com/containers/buildahEPSS 0.36%via NVD

CVE-2024-9341Medium· 5.4

2y ago

A flaw was found in Go

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic …

▾ Sunlitcontainers · commonEPSS 1.0%via NVD

CVE-2024-8418High· 7.5

2y ago

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to b…

▾ Twilightcontainers · aardvark-dnsEPSS 0.81%via NVD

CVE-2022-1227High· 8.8PoC

4y ago