CVE-2026-82430: Time-of-check Time-of-use (TOCTOU) Race Condition

Description When launching a Docker or OCI worker, the setuid-root worker-launcher first changes ownership of the entire worker directory to the untrusted topology user, and only afterwards reads and acts on the command file that the supervisor wrote into that same directory. The file is opened...

world-of-b0t

World Of B0t Cyberpunk security pentest lab for testing AI au...

sakuda

sakuda sakuda is short for 「さくっとDAST」 "DAST, quickly...

Labtainers v1.4.4n

Labtainers: A Docker-based cyber lab framework Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises...

OPENSUSE-SU-2026:11765-1 docker-29.7.2_ce-41.1 on GA media

These are all security issues fixed in the docker-29.7.2ce-41.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90934

These are all security issues fixed in the docker-29.7.2 ce-41.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-50025

Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: trivy-operator, k3s, headlamp-fips, amazon-ecs-agent-fips, kube-mgmt-fips, crossplane-cli, redpanda-operator, k8sgpt, crossplane-cli-fips, gitlab-rails-ce-fips, gitlab-rails-ce, rancher, tigera-operator, kubescape-operator-fips, k9s-fips, helm-operator-fips, skaffold...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: trivy-operator, k3s, headlamp-fips, amazon-ecs-agent-fips, kube-mgmt-fips, crossplane-cli, redpanda-operator, k8sgpt, crossplane-cli-fips, gitlab-rails-ce-fips, gitlab-rails-ce, rancher, tigera-operator, kubescape-operator-fips, k9s-fips, helm-operator-fips, skaffold...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: skaffold, grype, wolfictl, manifest-tool, dagger, trivy-operator, kubescape-operator, chartmuseum, neuvector-scanner, cluster-api-helm-controller, datadog-agent, xeol, helm-mapkubeapis, kube-arangodb, syft, trivy, headlamp, zarf, kubevela, docker-compose, steampipe,...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: skaffold, grype, wolfictl, manifest-tool, dagger, trivy-operator, kubescape-operator, chartmuseum, neuvector-scanner, cluster-api-helm-controller, datadog-agent, xeol, helm-mapkubeapis, kube-arangodb, syft, trivy, headlamp, zarf, kubevela, docker-compose, steampipe,...

CVE-2026-54248: Improper Verification of Cryptographic Signature

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...

Open Redirect

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Open Redirect in the Docker registry pagination handling, which follows the URL given in an HTTP Link header while still attaching the registry credentials, without confining the follow to the original...

CVE-2026-88889

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...

CVE-2026-88885

Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. Attackers can inject shell metacharacters through malicious dependency names to execute arbitrary...

CVE-2026-88888

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88888

A flaw was found in Renovate. Attackers can exploit a command injection vulnerability in the Mix manager by injecting shell metacharacters through malicious package names when processing private dependencies with unescaped organization parameters. This allows for the execution of arbitrary comman...

CVE-2026-88889

Renovate (dependency update automation tool) versions before 44.14.7 contain a command injection vulnerability in the Maven Wrapper manager . An unescaped distributionType parameter in maven-wrapper.properties allows attackers to inject shell commands, leading to remote code execution when Renova...

CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...

CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...