Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Podman can be slowed or stopped by crafted HTML
published 5 months ago
Summary
The Podman container tool version 5.6.1-10 may use excessive CPU when it processes specially crafted HTML pages, which can make the service unresponsive. This could affect workloads that rely on Podman for container management. Update Podman to a newer version that includes the fix or limit the processing of untrusted HTML content until the update is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | podman | <= 5.6.1-10 |
Original advisory text
CVE-2026-25680 affecting package podman 5.6.1-10
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
References
Timeline
Published22 May 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-87287 · OSV
Track software like this
Free during beta