{"id":"GO-2026-5568","revision":"fd2acdc79746453ea9f8e914ba54349f","records":[{"revision":"fd2acdc79746453ea9f8e914ba54349f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5568","aliases":["CVE-2026-55686","GHSA-q6r4-3wmg-fwcq"],"title":"Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman","description":"Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman","state":0,"publishedAt":"2026-06-25T22:34:34+00:00","modifiedAt":"2026-06-25T23:01:23.1145336+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"5.7.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq","https://github.com/podman-container-tools/podman/commit/7ce2e00ab140c11a68301f0b161f51984131a858","https://github.com/podman-container-tools/podman/commit/d18e44e9abb3bf5b7294aa70806e1368fdddfdd0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5568","license":"OSV · upstream source license applies","key":"osv:GO-2026-5568","identifiers":["GO-2026-5568","CVE-2026-55686","GHSA-q6r4-3wmg-fwcq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}