13474 matches found
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...
[SECURITY] Fedora 43 Update: docker-distribution-3.1.2-1.fc43
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
[SECURITY] Fedora 44 Update: docker-distribution-3.1.2-1.fc44
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
[SECURITY] Fedora 45 Update: docker-distribution-3.1.2-1.fc45
The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...
Fedora 44 : docker-distribution (2026-6ac19bf6ee)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6ac19bf6ee advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...
Fedora 43 : docker-distribution (2026-e60ac68542)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e60ac68542 advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...
GO-2026-6597 vulnerabilities
Vulnerabilities for packages: rancher, kubescape-server-fips, kube-arangodb-fips, trivy-fips, xeol, manifest-tool, k8sgpt, kube-mgmt-fips, falco-no-driver, helm-exporter, syft-fips, harvester-fips, chartmuseum, rancher-agent, datadog-agent-fips, cloudbeat, kubescape-operator, kubevela, consul-k8s...
Command Injection
Overview @nx/docker is a The Nx Plugin for Docker to aid in containerizing projects. Affected versions of this package are vulnerable to Command Injection via the docker tag, docker push, and docker images calls in the release pipeline, where registry URL, repository name, version scheme,...
@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)
@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0, =21.4.0, =21.4.0, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: SNYK:JS-NXDOCKER-20417215...
@nx/express (>=23.0.0, <=23.1.0), @nx/nest (>=23.0.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0)
@nx/docker NPM version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: SNYK:JS-NXDOCKER-20417215...
CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline
Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...
CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline
Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...
@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)
@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0, =21.4.0, =21.4.0, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...
@nx/express (>=23.0.0, <=23.1.0), @nx/nest (>=23.0.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0)
@nx/docker NPM version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: MEND:CVE-2026-104859...
CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline
Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...
CVE-2026-104859
The Nx monorepo solution for TypeScript and polyglot codebases is vulnerable to OS command injection in the @nx/docker release pipeline. In versions 21.4.0 until 22.7.8 and 23.0.0 until 23.1.1 , the release.docker.repositoryName and registryUrl configuration values are interpolated into shell com...
GHSA-8988-9CW3-XX77 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, pypy-3.10, jwt-tool, confluent-docker-utils, kubeflow-pipelines-visualization-server, superset, py3-pipenv, open-webui, kserve, datadog-agent, kubeflow-pipelines, py3-pip...
GHSA-GH4C-6FX4-QH6G vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, pypy-3.10, jwt-tool, confluent-docker-utils, kubeflow-pipelines-visualization-server, superset, py3-pipenv, open-webui, kserve, datadog-agent, kubeflow-pipelines, py3-pip...
CVE-2026-97688 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, pypy-3.10, jwt-tool, confluent-docker-utils, kubeflow-pipelines-visualization-server, superset, py3-pipenv, open-webui, kserve, datadog-agent, kubeflow-pipelines, py3-pip...
CVE-2026-97687 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, pypy-3.10, jwt-tool, confluent-docker-utils, kubeflow-pipelines-visualization-server, superset, py3-pipenv, open-webui, kserve, datadog-agent, kubeflow-pipelines, py3-pip...