1087 matches found
ALPINE-CVE-2026-3276
unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms...
CVE-2026-42575
apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...
ALPINE-CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...
ROOT-OS-ALPINE-315-CVE-2022-28506 CVE-2022-28506 in rootio-giflib - Patched by Root
Root has patched CVE-2022-28506 in the rootio-giflib package for Root:Alpine:3.15. Multiple fixed versions available...
CVE-2026-42574 apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...
apko 路径遍历漏洞
Apko is an open-source OCI image builder based on APK. In versions 0.14.8 to 1.2.5 of Apko, there was a path traversal vulnerability. This vulnerability occurred because specially crafted APK packages could install entries that pointed to directories other than the build root directory. This...
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have overwritten existing tags, including v2.1.20 and...
ALPINE-CVE-2026-4786
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...
ALPINE-CVE-2026-1502
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host...
ALPINE-CVE-2026-25835
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator PRNG...
ALPINE-CVE-2026-25834
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade...
ROOT-OS-ALPINE-319-CVE-2023-5568 CVE-2023-5568 in rootio-samba - Patched by Root
Root has patched CVE-2023-5568 in the rootio-samba package for Root:Alpine:3.19. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46847 CVE-2023-46847 in rootio-squid - Patched by Root
Root has patched CVE-2023-46847 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-50269 CVE-2023-50269 in rootio-squid - Patched by Root
Root has patched CVE-2023-50269 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46846 CVE-2023-46846 in rootio-squid - Patched by Root
Root has patched CVE-2023-46846 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-49286 CVE-2023-49286 in rootio-squid - Patched by Root
Root has patched CVE-2023-49286 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46724 CVE-2023-46724 in rootio-squid - Patched by Root
Root has patched CVE-2023-46724 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46848 CVE-2023-46848 in rootio-squid - Patched by Root
Root has patched CVE-2023-46848 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...