Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: poppler: poppler-26.08.0-1.5.hum1 aarch64, s390x, x8664 poppler-cpp-26.08.0-1.5.hum1 aarch64, s390x, x8664 poppler-cpp-devel-26.08.0-1.5.hum1 aarch64, s390x, x8664 poppler-devel-26.08.0-1.5.hum1...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gdb: gdb-17.2-6.2.hum1 aarch64, s390x, x8664 gdb-doc-17.2-6.2.hum1 noarch gdb-gdbserver-17.2-6.2.hum1 aarch64, s390x, x8664 gdb-headless-17.2-6.2.hum1 aarch64, s390x, x8664...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnupg2: gnupg2-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-dirmngr-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-g13-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-gpg-agent-2.4.9-18.3.hum1 aarch64...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: binutils: binutils-2.46.1-1.4.hum1 aarch64, s390x, x8664 binutils-devel-2.46.1-1.4.hum1 aarch64, s390x, x8664 binutils-gold-2.46.1-1.4.hum1 aarch64, s390x, x8664 binutils-gprofng-2.46.1-1.4.hum1...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub 's account-to-organization conversion feature allows an authenticated attacker to reassign a personal access token (PAT) they control to another user. Because the token secret remains unchanged during this reassignment, the attacker ca...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

pulsar-docker-images-patch-CVE-2021-44228

Patch pulsar images with Apache Log4J 2.17.1 upgrade Covers CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 See Log4J Security Vulnerabilities and upgrades for more information. see the Dockerfile for the solution Building and pushing patched docker images example usage: build and t...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssh: openssh-10.5p1-1.2.hum1 aarch64, s390x, x8664 openssh-askpass-10.5p1-1.2.hum1 aarch64, s390x, x8664 openssh-clients-10.5p1-1.2.hum1 aarch64, s390x, x8664 openssh-keycat-10.5p1-1.2.hum1...

kubeclarity

!IMPORTANT KubeClarity has been deprecated and succeeded by openclarity/openclarity. Check the release statement for more information. This project does not receive updates. We encourage you to migrate. KubeClarity is a tool for detection and management of Software Bill Of Materials SBOM and...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.42 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

BIT-GHOST-2026-105644 Ghost: Stored XSS via SVG Files in Content Imports

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...

cve-2018-16509

CVE-2018-16509 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16509 Image author: https://github.com/knqyf263/CVE-2018-16509...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

PT-2026-111670

Name of the Vulnerable Software and Affected Versions Docker Hub affected versions not specified Description An authentication bypass flaw in the management of Personal Access Tokens PAT allowed attackers to impersonate users and organizations. An attacker could create a personal account, generat...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: capstone: capstone-5.0.8-0.5.hum1 aarch64, s390x, x8664 capstone-devel-5.0.8-0.5.hum1 aarch64, s390x, x8664 capstone-java-5.0.8-0.5.hum1 noarch capstone-static-5.0.8-0.5.hum1 aarch64, s390x, x866...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.9-0.2.hum1 aarch64, s390x, x8664 golang1.26-bin-1.26.9-0.2.hum1 aarch64, s390x, x8664 golang1.26-docs-1.26.9-0.2.hum1 noarch golang1.26-misc-1.26.9-0.2.hum1 noarch...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.5.hum1 aarch64, s390x, x8664 cups-client-2.4.19-4.5.hum1 aarch64, s390x, x8664 cups-devel-2.4.19-4.5.hum1 aarch64, s390x, x8664 cups-filesystem-2.4.19-4.5.hum1 noarch...

CVE-2026-109324

Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting...

CVE-2026-109268

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...