13482 matches found
Exploit for CVE-2026-17106
CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-50204 +1 more via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-50204, CVE-2026-68969 Source advisory: OSV:PYSEC-2026-3711...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-59244 +1 more via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-59244, CVE-2026-68970 Source advisory: OSV:PYSEC-2026-3712...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-68971 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-68971 Source advisory: OSV:PYSEC-2026-3994...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-68968 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-68968 Source advisory: OSV:PYSEC-2026-3710...
airflow-docker (>=0.1.1, <=0.5.0), airflow-indexima (>=1.0.1, <=2.2.1) +5 more potentially affected by CVE-2026-68968 via apache-airflow (1.10.2)
apache-airflow PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =0.1.1, =1.0.1, =0.4.0rc2, =0.1.0, =3.0.0, =0.0.12, =1.0.1 Source cves: CVE-2026-68968 Source advisory:...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-68076 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-68076 Source advisory: OSV:PYSEC-2026-3709...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-59242 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-59242 Source advisory: OSV:PYSEC-2026-3992...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-59244 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-59244 Source advisory: OSV:PYSEC-2026-3706...
airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-54183 via apache-airflow (1.10.5)
apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2026-54183 Source advisory: OSV:PYSEC-2026-3705...
CVE-2026-49349
regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs f...
CVE-2026-18171
Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
EUVD-2026-57256
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-68754
CVE-2026-68754 describes a vulnerability where a repository publisher without delete permission may modify protected package content under specific conditions, including the ability to overwrite Docker layer information (as per CVE listings). The CVSS 3.1 metrics indicate a network-based attack w...
CVE-2026-18171 Docker Sandboxes read-only runtime mount writable through its shared-export alias
Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...