RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

CVE-2026-103433

Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...

CLEANSTART-2026-FH32149 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

Fedora 46 : docker-buildx (2026-934d570022)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-934d570022 advisory. Automatic update for docker-buildx-0.37.2-1.fc46. Changelog Wed Sep 30 2026 Bradley G Smith - 0.37.2-1 - Update to release v0.37.2 - Resolves:...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: kube-arangodb, k3s, scorecard, falco-no-driver, zarf, nerdctl, dagger, zot, gatekeeper, skaffold, chartmuseum, kaniko, newrelic-infrastructure-agent, tigera-operator, helm-mapkubeapis, kubescape, trivy-operator, docker, rancher-agent, syft, kubescape-operator, kargo,...

AZL-99195 CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99198 CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-98358 CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: kubescape, scorecard, trivy-operator, docker-cli-buildx, zot, skaffold, kaniko, trivy, osv-scanner, guac, buildah, podman, conftest, docker-compose...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: kubescape, scorecard, trivy-operator, docker-cli-buildx, zot, skaffold, kaniko, trivy, osv-scanner, guac, buildah, podman, conftest, docker-compose...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, kubernetes-csi-external-provisioner, kube-vip, net-kourier, slsa-verifier, frp, bank-vaults, pgpool2exporter, terraform-provider-acme, step-ca, flyte, cert-manager-webhook-pdns, crossplane-provider-aws-elasticache,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, terraform-provider-acme, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, cluster-api-azure-controller, kubescape, gatus, ksops, witness,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: zarf, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, flux-source-controller, witness, policy-controller, tekton-chains, sigstore-scaffolding, falcoctl, spire-server, kyverno-notation-aws, goreleaser, docker-cli-buildx,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, crossplane, docker, sigstore-scaffolding, falcoctl, spire-server,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, mongo-tools, aws-otel-collector, nri-f5, nuclei, glow, chartmuseum, rabbitmq-default-user-credential-updater, cerbos, ipfs-cluster, nri-nginx, cluster-api-azure-controller, cni-plugins, dive, kapp-controller, kpt, witness, swagger, tekton-chains, kapp, wal-g,...