930 matches found
CVE-2026-42575
apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...
ALPINE-CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...
ROOT-OS-ALPINE-315-CVE-2022-28506 CVE-2022-28506 in rootio-giflib - Patched by Root
Root has patched CVE-2022-28506 in the rootio-giflib package for Root:Alpine:3.15. Multiple fixed versions available...
CVE-2026-42574 apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...
apko 路径遍历漏洞
Apko is an open-source OCI image builder based on APK. In versions 0.14.8 to 1.2.5 of Apko, there was a path traversal vulnerability. This vulnerability occurred because specially crafted APK packages could install entries that pointed to directories other than the build root directory. This...
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have overwritten existing tags, including v2.1.20 and...
ALPINE-CVE-2026-25835
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator PRNG...
ALPINE-CVE-2026-25834
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade...
ROOT-OS-ALPINE-319-CVE-2023-5568 CVE-2023-5568 in rootio-samba - Patched by Root
Root has patched CVE-2023-5568 in the rootio-samba package for Root:Alpine:3.19. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46846 CVE-2023-46846 in rootio-squid - Patched by Root
Root has patched CVE-2023-46846 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46847 CVE-2023-46847 in rootio-squid - Patched by Root
Root has patched CVE-2023-46847 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-50269 CVE-2023-50269 in rootio-squid - Patched by Root
Root has patched CVE-2023-50269 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46724 CVE-2023-46724 in rootio-squid - Patched by Root
Root has patched CVE-2023-46724 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-49286 CVE-2023-49286 in rootio-squid - Patched by Root
Root has patched CVE-2023-49286 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2023-46848 CVE-2023-46848 in rootio-squid - Patched by Root
Root has patched CVE-2023-46848 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2024-23638 CVE-2024-23638 in rootio-squid - Patched by Root
Root has patched CVE-2024-23638 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2024-37894 CVE-2024-37894 in rootio-squid - Patched by Root
Root has patched CVE-2024-37894 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-22796 CVE-2026-22796 in rootio-openssl - Patched by Root
Root has patched CVE-2026-22796 in the rootio-openssl package for Root:Alpine:3.23. Multiple fixed versions available...