PT-2026-104588

Name of the Vulnerable Software and Affected Versions act runner affected versions not specified Description The act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When privileged mode is disabled, the system only forces the...

Fedora 45 : docker-distribution (2026-13584cfe41)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-13584cfe41 advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...

missinglinkai-resource-manager-docker (>=1.0.367, <=2.14.1737), pyne-xmas-elves (>=0.1.0, <=0.7.1) +2 more potentially affected by CVE-2026-77528 via autobahn (17.10.1)

autobahn PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - missinglinkai-resource-manager-docker =1.0.367, =0.1.0, =0.7.2, =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-40...

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

SummaryThe dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2026-15307 via django (2.1.8)

django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

docker-compose-control-center (3.1.0) potentially affected by CVE-2026-15307 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-15307 via django (2.1.11)

django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

roundcube-cve-2025-49113

Install docker run --name ubuntu24 \ -p 9876:80 \ -v "$PWD/rcinstall.sh":/root/rcinstall.sh \ -it ubuntu:24.04 \ bash -c "chmod +x /root/rcinstall.sh && /root/rcinstall.sh && exec bash" POC Youtube Follow me @Linkdin Credit @ fearsoff-org...

CLEANSTART-2026-RR17110 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-SK27128 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps

Security vulnerability affects the docker-cli-buildx package. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps...

CLEANSTART-2026-ZT40995 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-FH32149 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-RR21163 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CLEANSTART-2026-KD34055 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the docker-cli-buildx package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CLEANSTART-2026-DK67034 Security fix for GHSA-xm5m-wgh2-rrg3 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU05502 Security fix for GHSA-hfvc-g4fc-pqhx applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG47490 Security fix for GHSA-w8rr-5gcm-pp58 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...