Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/podman-container-tools/buildah

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-44517 is a path traversal vulnerability in the Buildah tool used for building OCI images. Versions from 1.38.1 up to but not including 1.43.2, and a range starting at 1.44.0 but excluding 1.44.0, are affected. The flaw allows a malicious Git repository or tar archive server to cause files outside the intended build context directory to be included or copied into the build. This issue is fixed in versions 1.43.2 and 1.44.0.

Join the discussion

A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Package: pkg:github/podman-container-tools/buildah
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses