Postmortem: How a Vulnerability in Podman 5.0 Let Attackers Access Our Private Container Registry

Postmortem: How a Vulnerability in Podman 5.0 Let Attackers Access Our Private Container Registry Executive Summary On March 12, 2024, our security team detected unauthorized access to our private container registry, traced to a critical vulnerability in Podman 5.0's registry authentication module.