Homepage

cockpit-podman vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the cockpit-podman package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Check for Unusual or Exceptional Conditions

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Improper Validation of Integrity Check Value

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2023-45803

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Improper Certificate Validation

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Open Redirect

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2024-24791

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2024-24788

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • H
CVE-2025-22869

<0:84.1-1.module+el8.10.0+2001+6a33db9f
  • M
Allocation of Resources Without Limits or Throttling

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2023-39321

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Cross-site Scripting (XSS)

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Cross-site Scripting (XSS)

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Resource Exhaustion

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
Allocation of Resources Without Limits or Throttling

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2022-27664

<0:46-1.module+el8.9.0+1445+07728297
  • M
Information Exposure

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2023-39326

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • H
Improper Privilege Management

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
Directory Traversal

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
Information Exposure

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
CVE-2021-33198

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • H
Directory Traversal

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
Improper Input Validation

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
Link Following

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
CVE-2024-34158

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
CVE-2024-34156

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
CVE-2024-34155

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
Information Exposure Through Log Files

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
CVE-2024-37298

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
Improper Validation of Integrity Check Value

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
CVE-2024-24789

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
CVE-2024-24784

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2024-24783

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • H
Memory Leak

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
CVE-2023-45290

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2024-28176

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
CVE-2024-28180

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • M
CVE-2024-24786

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
CVE-2022-41715

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • M
HTTP Request Smuggling

<0:84.1-1.module+el8.10.0+1948+4b5cd4a9
  • H
Link Following

<0:84.1-1.module+el8.10.0+1815+5fe7415e
  • H
Exposure of Resource to Wrong Sphere

<0:46-1.module+el8.9.0+1445+07728297
  • M
Interpretation Conflict

<0:46-1.module+el8.9.0+1445+07728297
  • H
Out-of-bounds Write

<0:11-1.module+el8.5.0+708+6758137d
  • H
Buffer Overflow

<0:11-1.module+el8.5.0+708+6758137d
  • H
Directory Traversal

<0:11-1.module+el8.5.0+708+6758137d
  • M
Race Condition

<0:53-1.module+el8.7.0+1078+e72fcd4f
  • M
Origin Validation Error

<0:29-2.module+el8.6.0+783+10209741
  • M
NULL Pointer Dereference

<0:29-2.module+el8.6.0+783+10209741
  • H
Incorrect Authorization

<0:11-1.module+el8.5.0+708+6758137d
  • H
Use After Free

<0:11-1.module+el8.5.0+708+6758137d
  • H
Race Condition

<0:11-1.module+el8.5.0+708+6758137d
  • M
Improper Locking

<0:33-1.module+el8.5.0+710+4c471e88
  • M
Incorrect Default Permissions

<0:29-2.module+el8.6.0+783+10209741
  • H
Incorrect Default Permissions

<0:43-1.module+el8.6.0+784+32aef5de
  • M
Incorrect Default Permissions

<0:29-2.module+el8.6.0+783+10209741
  • H
Allocation of Resources Without Limits or Throttling

<0:43-1.module+el8.6.0+784+32aef5de
  • H
Improper Privilege Management

<0:43-1.module+el8.6.0+784+32aef5de
  • M
Improper Cross-boundary Removal of Sensitive Data

<0:11-1.module+el8.5.0+708+6758137d
  • M
CVE-2022-32148

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
Uncontrolled Recursion

<0:29-2.module+el8.6.0+783+10209741
  • M
HTTP Request Smuggling

<0:29-2.module+el8.6.0+783+10209741
  • L
Placement of User into Incorrect Group

<0:53-1.module+el8.7.0+1078+e72fcd4f
  • M
Placement of User into Incorrect Group

<0:53-1.module+el8.7.0+1078+e72fcd4f
  • M
Incorrect Default Permissions

<0:46-1.module+el8.7.0+1077+0e4f03d4
  • M
CVE-2022-27191

<0:46-1.module+el8.7.0+1077+0e4f03d4
  • M
Allocation of Resources Without Limits or Throttling

<0:46-1.module+el8.7.0+1077+0e4f03d4
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:53-1.module+el8.7.0+1078+e72fcd4f