PT-2026-63374

A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...

TencentOS Server 3: container-tools:rhel8 bug fix and enhancement update (Moderate) (TSSA-2024:1160)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1160 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

honeyprompt v0.1.8

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

GHSA-5GVW-P9QM-JGWH jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

Summary UnwrappedPropertyHandler.processUnwrapped replays the buffered JSON for a @JsonUnwrapped property by iterating its properties and calling prop.deserializeAndSet with no prop.visibleInViewctxt.getActiveView guard — the exact guard processUnwrappedCreatorProperties received in the 5971 /...

jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

Summary UnwrappedPropertyHandler.processUnwrapped replays the buffered JSON for a @JsonUnwrapped property by iterating its properties and calling prop.deserializeAndSet with no prop.visibleInViewctxt.getActiveView guard — the exact guard processUnwrappedCreatorProperties received in the 5971 /...

EUVD-2026-46364

Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalidated container offset and cardinality in rbcontainslocked. The attach-time validator rbvalidateheader checks the header scalars and region layout against the file size, but does not validate the...

CVE-2026-59143

The Data::RoaringBitmap::Shared Perl module (versions before 0.02 ) is vulnerable to an out-of-bounds read in the rb_contains_locked function. The root cause is that the rb_validate_header validator fails to check bucket contents, even though it validates header scalars against file size. Specifi...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-63917

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

GHSA-55JH-FWMH-39M4 Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

CVE-2026-15791

CVE-2026-15791 concerns BuildKit LLB/file operations where a crafted low-level build API message can escape the build root and remove contents of the host’s /tmp directory. Technical details across sources describe a Directory Traversal in the file operation (FileActionRm.Path) that can lead to h...

EUVD-2026-46310

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.25 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.25 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update

Multicluster Global Hub v1.5.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2026-15226

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or...