AZL-107363 CVE-2026-78663 affecting package docker-compose 2.27.0-14

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107342 CVE-2026-78660 affecting package docker-cli 25.0.7-5

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107354 CVE-2026-78659 affecting package docker-compose 2.27.0-14

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107306 CVE-2026-78659 affecting package docker-buildx 0.14.0-17

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107339 CVE-2026-78659 affecting package docker-cli 25.0.7-5

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107312 CVE-2026-78660 affecting package docker-buildx 0.14.0-17

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107357 CVE-2026-78660 affecting package docker-compose 2.27.0-14

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

Symlink Attack

Overview aws-cdk-lib is a Version 2 of the AWS Cloud Development Kit library Affected versions of this package are vulnerable to Symlink Attack in the asset bundling output handling, which accepts a symbolic link that the Docker build placed in the output directory even though no such link was...

cved

CVED Uno strumento per gestire container docker vulnerabili INSTALLAZIONE qt = 5.x docker git qmake make sudo make install UTILIZZO Crea il gruppo docker se non esiste già. sudo groupadd docker Aggiungi il tuo utente al gruppo docker. sudo usermod -aG docker $USER Esci e accedi di nuovo affinché ...

CVE-2026-105570

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105452

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-101998

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-105452 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-105452

Docker Sandboxes are vulnerable to a flaw in the egress proxy , which may forward unrecognized client-supplied credentials alongside credentials injected by the host. The proxy only removes alternate credentials if they match specific known sentinel values; consequently, untrusted code within an ...

CVE-2026-105452 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

EUVD-2026-95159

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...

CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

CVE-2026-101998

Docker Sandboxes are vulnerable to a fail-open response masking issue where certain handlers may forward unmasked bytes when a response-body read returns data alongside an error. This vulnerability allows code running inside an authorized sandbox to potentially recover sensitive host-managed OAut...

CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...

EUVD-2026-95157

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...