{"id":"GO-2026-6588","revision":"e596b8fd94a044d4b0df87f774e4935b","records":[{"revision":"e596b8fd94a044d4b0df87f774e4935b","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6588","aliases":["CVE-2026-19730","GHSA-fx76-2j3w-2mx6"],"title":"podman quadlet install --replace does not fully replace the old file in github.com/containers/podman","description":"podman quadlet install --replace does not fully replace the old file in github.com/containers/podman","state":0,"publishedAt":"2026-10-01T20:23:38+00:00","modifiedAt":"2026-10-01T20:45:14.9871148+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"5.7.0"},{"kind":"fixed","version":"5.8.6"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-fx76-2j3w-2mx6","https://nvd.nist.gov/vuln/detail/CVE-2026-19730","https://access.redhat.com/errata/RHSA-2026:69961","https://access.redhat.com/errata/RHSA-2026:70201","https://access.redhat.com/security/cve/CVE-2026-19730","https://bugzilla.redhat.com/show_bug.cgi?id=2508234","https://github.com/podman-container-tools/podman/commit/0ea4eaee70b7458bcc99d875529761faf5172651","https://github.com/podman-container-tools/podman/commit/a38a9b7d20915c55e6f3c451101ae72d6da33742","https://github.com/podman-container-tools/podman/commit/d3adfdeec7d5c9eee5a6978df3bee62a866c958d","https://github.com/podman-container-tools/podman/commit/d4fe9154ec6e32a02d5fcd096c4a27c38f2040f4","https://github.com/podman-container-tools/podman/issues/29013","https://github.com/podman-container-tools/podman/pull/27980","https://github.com/podman-container-tools/podman/releases/tag/v5.8.6","https://github.com/podman-container-tools/podman/releases/tag/v6.0.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6588","license":"OSV · upstream source license applies","key":"osv:GO-2026-6588","identifiers":["GO-2026-6588","CVE-2026-19730","GHSA-fx76-2j3w-2mx6"]},"retained":false,"historicalAffected":[]}],"coverage":[]}