CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: syft, kbld, kuma, neuvector-scanner-fips, dex-fips, kubescape, knative-operator-fips, task, oras-fips, rancher-helm, aws-flb-cloudwatch, zot, atlantis-fips, buildah-fips, vault-secrets-operator, argo-workflows-fips, helm-fips, image-factory-fips, weaviate, apko,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: request-1279-14, syft, grpcurl-fips, kuma, neuvector-scanner-fips, prometheus-adapter, gcp-compute-persistent-disk-csi-driver-fips, dex-fips, oauth2-proxy, grafana-mimir, kubescape, knative-operator-fips, argo-events, task, terraform-provider-kubernetes,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: syft, kbld, kuma, neuvector-scanner-fips, dex-fips, kubescape, knative-operator-fips, task, oras-fips, rancher-helm, aws-flb-cloudwatch, zot, atlantis-fips, buildah-fips, vault-secrets-operator, argo-workflows-fips, helm-fips, image-factory-fips, weaviate, apko,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: request-1279-14, syft, grpcurl-fips, kuma, neuvector-scanner-fips, prometheus-adapter, gcp-compute-persistent-disk-csi-driver-fips, dex-fips, oauth2-proxy, grafana-mimir, kubescape, knative-operator-fips, argo-events, task, terraform-provider-kubernetes,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, request-1279-14, ip-masq-agent, syft, kubernetes-secret-generator, kbld, newrelic-infra-operator, grpcurl-fips, kuma, neuvector-scanner-fips, aws-nuke-fips, prometheus-adapter, gcp-compute-persistent-disk-csi-driver-fips, dex-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, request-1279-14, ip-masq-agent, syft, kubernetes-secret-generator, kbld, newrelic-infra-operator, grpcurl-fips, kuma, neuvector-scanner-fips, aws-nuke-fips, prometheus-adapter, gcp-compute-persistent-disk-csi-driver-fips, dex-fips,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: gofumpt, kuma, oauth2-proxy, grafana-mimir, knative-operator-fips, cert-manager-openshift-routes-fips, litmus-chaos-operator, wuzz, aws-flb-cloudwatch, vault-secrets-operator, kiali-fips, neuvector-dbgen-fips, lazygit, helm-fips, fq, rancher-loglevel, hugo-extended,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gofumpt, kuma, oauth2-proxy, grafana-mimir, knative-operator-fips, cert-manager-openshift-routes-fips, litmus-chaos-operator, wuzz, aws-flb-cloudwatch, vault-secrets-operator, kiali-fips, neuvector-dbgen-fips, lazygit, helm-fips, fq, rancher-loglevel, hugo-extended,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, request-1279-14, ip-masq-agent, syft, kubernetes-secret-generator, kbld, newrelic-infra-operator, grpcurl-fips, kuma, neuvector-scanner-fips, aws-nuke-fips, prometheus-adapter, gcp-compute-persistent-disk-csi-driver-fips, dex-fips,...

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

Summary A path traversal vulnerability Zip Slip exists in the media archive import feature. An authenticated user with owner-level privileges can craft a malicious ZIP file with directory-traversal filenames to write arbitrary files outside the intended temporary extraction directory on the...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-handler, virt-controller-fips, virt-launcher, docker-machine-driver-harvester...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-handler, virt-controller-fips, virt-launcher, docker-machine-driver-harvester...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-handler, virt-controller-fips, virt-launcher, docker-machine-driver-harvester...

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

arcane 代码问题漏洞

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.17.3 contained code vulnerabilities. These vulnerabilities stemmed from the /api/templates/fetch endpoint, which accepted URL parameters provided by callers and processed HTTP GET requests witho...

PT-2026-32043

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 1.17.3 Description Arcane is an interface for managing Docker containers, images, networks, and volumes. The /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET...

CVE-2026-39848 Dockyard's Unauthenticated Cron Endpoint in Dockyard Enables Container Enumeration and Database Manipulation

Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. A remote attacker can cause a logged-in administrator's browser to request /apps/action.php?action=stop&name= or...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: tekton-chains, containerd, openfga, flux-kustomize-controller, spegel, crossplane-provider-family-aws, metrics-server, crossplane-provider-sql, sftpgo-plugin-kms, tempo, gitlab-runner, grafana-alloy, terraform-provider-grafana, thanos, dive, trivy-operator, k8sgpt,...

CLEANSTART-2026-UQ00642 Docker CLI for Windows searches for plugin binaries in C:\\ProgramData\\Docker\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the minio-operator-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-YR07499 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...