[SECURITY] Fedora 43 Update: docker-buildx-0.35.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildkit-0.31.0-1.fc43

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-2479)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-2438)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

CVE-2026-53576

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-53576

Kestra (OSS) before versions 1.0.45 and 1.3.21 is affected by an authentication bypass in the REST API filter. The code checks request.getPath().endsWith("/configs") instead of matching the exact endpoint, causing anonymous bypass to endpoints like /api/v1/{tenant}/flows/configs and /api/v1/{tena...

CVE-2026-53576 Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-53576 Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane-fips, kubescape, falcoctl-fips, neuvector-sigstore-interface, trivy-operator-fips, kubescape-server-fips, cloudbeat-fips, ko, slsa-verifier, tflint, tekton-chains, kyverno, ko-fips, policy-controller, tekton-chains-fips, kyverno-notation-aws, zarf,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: crossplane-fips, kubescape, falcoctl-fips, neuvector-sigstore-interface, trivy-operator-fips, kubescape-server-fips, cloudbeat-fips, ko, slsa-verifier, tflint, tekton-chains, kyverno, ko-fips, policy-controller, tekton-chains-fips, kyverno-notation-aws, zarf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, knative-kafka-broker, kubescape, grafana, nemo, frankenphp-8.4, snyk-cli, argo-workflows-fips, cloudbeat-fips, zot, argo-cd, calico-fips, gitlab-rails-ce-fips, tekton-pipelines-fips, kyverno, coder, skaffold, chisel-fips, kubernetes-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: longhorn-manager-fips, argo-cd-fips, knative-kafka-broker, kubescape, grafana, nemo, frankenphp-8.4, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, zot, argo-cd, calico-fips, gitlab-rails-ce-fips, tekton-pipelines-fips, peerdb-flow, kyverno,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, knative-kafka-broker, external-secrets-fips, frankenphp-8.4, pulumi-language-dotnet, zot, crossplane-provider-aws-rds, gitlab-rails-ce-fips, guac, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-macie2, terraform-provider-acme,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: argo-cd-fips, knative-kafka-broker, external-secrets-fips, frankenphp-8.4, pulumi-language-dotnet, zot, crossplane-provider-aws-rds, gitlab-rails-ce-fips, guac, crossplane-provider-aws-elbv2-fips, crossplane-provider-aws-macie2, terraform-provider-acme,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, knative-kafka-broker, grafana, nemo, frankenphp-8.4, snyk-cli, argo-workflows-fips, zot, argo-cd, calico-fips, gitlab-rails-ce-fips, tekton-pipelines-fips, kyverno, kubernetes-fips, knative-kafka-broker-fips, opentelemetry-collector, omnictl-multiarch,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, zarf, go-discover, kubescape, external-dns, osv-scanner, ksops, trivy, gitlab-kas, chisel, ko, teleport, rancher-machine, terraform-provider-azurerm, gomplate, gitlab-runner, istio, terragrunt, fulcio, buildah, knative-serving, melange, containerd,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: k9s, zarf, go-discover, kubescape, external-dns, osv-scanner, ksops, trivy, gitlab-kas, chisel, ko, teleport, rancher-machine, terraform-provider-azurerm, gomplate, gitlab-runner, istio, terragrunt, fulcio, buildah, knative-serving, melange, containerd,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: k9s, zarf, kubescape, external-dns, osv-scanner, trivy, gitlab-kas, chisel, rancher-machine, gomplate, gitlab-runner, istio, terragrunt, melange, knative-serving, containerd, docker-cli-buildx, wal-g, loki, cert-manager, witness, syft, scorecard, argocd-image-updater...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kine, prometheus, prometheus-operator, external-dns, kaf, kubernetes, gitlab-kas, zot, cilium, istio, aactl, telegraf, minio, helm, buildah, cilium-cli, knative-serving, containerd, kubernetes-dashboard, docker-cli-buildx, flux, loki, fscrypt, cert-manager,...

CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRETKEYBASE=OVERWRITEME as the default Rails master key. Combined with cookiesserializer = :marshal, this gives any logged-in user a deterministic...