modules:
    - module: github.com/containers/podman/v4
      versions:
        - introduced: 4.1.0-rc1
      vulnerable_at: 4.3.1
      packages:
        - package: github.com/containers/podman/v4/pkg/bindings/images
          symbols:
            - Build
            - nTar
description: |-
      The local path and the lowest subdirectory may be disclosed due to
      incorrect absolute path traversal, resulting in an impact to
      confidentiality.
cves:
    - CVE-2022-4123
ghsas:
    - GHSA-rprg-4v7q-87v7
credit: Sage McTaggart
references:
    - report: https://bugzilla.redhat.com/show_bug.cgi?id=2144989
    - web: https://github.com/containers/podman/pull/13531