RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

AZL-99195 CVE-2026-78662 affecting package docker-buildx 0.14.0-16

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99198 CVE-2026-56855 affecting package docker-buildx 0.14.0-16

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-98358 CVE-2026-37236 affecting package docker-buildx 0.14.0-16

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: podman, kaniko, docker-compose, scorecard, trivy-operator, skaffold, docker-cli-buildx, trivy, osv-scanner, guac, kubescape, conftest, zot, buildah...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: podman, kaniko, docker-compose, scorecard, trivy-operator, skaffold, docker-cli-buildx, trivy, osv-scanner, guac, kubescape, conftest, zot, buildah...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, datadog-agent, fuse-overlayfs-snapshotter, temporal-server, crossplane-provider-aws-cloudwatchlogs, cert-exporter, kubernetes-csi-external-provisioner, kubernetes-event-exporter, bento, gomplate, neuvector-scanner, osv-scanner, cluster-ap...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, crossplane-provider-aws-ec2, datadog-agent, eksctl, crossplane-provider-aws-cloudwatchlogs, osv-scanner, gomplate, zot, containerd, kubernetes-dashboard, crossplane-provider-aws-s3, crossplane-provider-family-azure, tw, vault-benchmark, fscrypt,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ko, neuvector-sigstore-interface, kubescape, skaffold, spire-server, kyverno-notation-aws, zot, aactl, goreleaser, tflint, gh, ratify, zarf, sigstore-scaffolding, policy-controller, flux-source-controller, falcoctl, docker-cli-buildx, tekton-chains, vexctl, tkn,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ko, neuvector-sigstore-interface, skaffold, spire-server, kyverno-notation-aws, zot, aactl, goreleaser, tflint, gh, ratify, zarf, sigstore-scaffolding, policy-controller, flux-source-controller, falcoctl, crossplane, trivy-operator, docker-cli-buildx, tekton-chains,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: eksctl, zot, grafana-rollout-operator, containerd, kubernetes-dashboard, bom, k8sgateway, kubernetes-dashboard-api, delve, dive, harbor-cli, controller-gen, cerbos, prometheus-operator, spire-controller-manager, nginx-prometheus-exporter,...

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...

Fedora 45 : docker-buildx (2026-c37317fdde)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...

AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: melange, apko, grype, kube-fluentd-operator, snyk-cli, fuse-overlayfs-snapshotter, kots, caddy, loki, pulumi-language-dotnet, src, libnvidia-container, grafana-operator, containerd, kubernetes-dashboard, dataplaneapi, helm, opentofu, pinact, kubernetes, rekor, kine,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: eksctl, neuvector-scanner, pgpool2exporter, delve, harbor-cli, prometheus-operator, cluster-proportional-autoscaler, kubo, aws-application-networking-k8s, dapr, kube-logging-operator, step, envoy-ratelimit, mattermost, tempo, k3s,...

[SECURITY] Fedora 44 Update: docker-buildx-0.35.0-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildx-0.35.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: prometheus-operator, kuma, terraform-fips, gitlab-rails-ce, reports-server, tekton-pipelines, falco-no-driver, knative-eventing-fips, flux, minio, frankenphp-8.5, commercial-expanso-edge, keda-fips, knative-serving-fips, packer, buildah, elastic-agent-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: melange, datadog-agent, eksctl, osv-scanner, gomplate, age, zot, containerd, kubernetes-dashboard, crossplane-provider-family-azure, vault-benchmark, fscrypt, prometheus-operator, scorecard, trivy-operator, telegraf, openbao, cert-manager, flux-kustomize-controller,...