{"id":"GO-2025-3777","revision":"494cae0b250944828f2ed89486bd2ea5","records":[{"revision":"494cae0b250944828f2ed89486bd2ea5","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3777","aliases":["CVE-2025-6032","GHSA-65gg-3w2w-hr4h"],"title":"Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman","description":"Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman","state":0,"publishedAt":"2025-07-28T19:57:13+00:00","modifiedAt":"2026-02-04T02:15:34.946228+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.8.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"5.5.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h","https://nvd.nist.gov/vuln/detail/CVE-2025-6032","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3777","license":"OSV · upstream source license applies","key":"osv:GO-2025-3777","identifiers":["GO-2025-3777","CVE-2025-6032","GHSA-65gg-3w2w-hr4h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}