CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-97032 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-97032 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-61801 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-61801 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78660 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78660 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78660 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78660 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

自动化安全评估系统

安全研究员需要对企业内外部代码工程做漏洞审计，但纯人工审计慢、覆盖不全、误报高、报告撰写耗时——本项目用 多智能体协同 + Docker 沙箱隔离，把"源码接入 → 静态审计 → 动态无害验证 → 攻击链推演 → 报告交付"整条链路自动化，产出可复现漏洞证据、Diff 修复补丁与专业评估报告...

CVE-2026-105037

EnergizeLab station-middleware NestJS Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets...

EUVD-2026-102433

EnergizeLab station-middleware NestJS Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

Astra Linux – Vulnerability in docker.io

Moby is an open-source container framework developed by Docker Inc. It is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

Astra Linux – Vulnerability in docker.io-app

Moby version 25.0.3 has a race condition vulnerability in the StreamFormatter package. This vulnerability can be exploited to trigger multiple concurrent write operations, leading to data corruption or application crashes...

Astra Linux – Vulnerability in docker.io

In Docker versions prior to 9.03.15 and 20.10.3, there is a vulnerability related to the --userns-remap option. This option allows access to the remapped root directory, enabling privilege escalation to the actual root directory. When using --userns-remap, if the root user in the remapped namespa...

Astra Linux – Vulnerability in docker.io-app

Docker Compose relies on the path information embedded in remote OCI Compose artifacts. When a layer includes the annotations com.dockercompose.extends or com.dockercompose.envfile, Compose incorporates the value provided by the attacker from com.dockercompose.file/com.dockercompose.envfile into...

Astra Linux – vulnerability in docker.io-app

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary...

Astra Linux – vulnerability in docker.io

In Docker versions prior to 9.03.15 and 20.10.3, there is a vulnerability wherein pulling a deliberately malformed Docker image manifest causes the dockerd daemon to crash. Versions 20.10.3 and 19.03.15 include patches that prevent this crash...

CVE-2026-41544 Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and...