CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: skaffold, livekit-cli, trivy-operator-fips, guac, docker-cli-buildx, kaniko, zot, docker-compose-fips, skaffold-fips, kaniko-fips, kubescape, buildah-fips, buildah, cloudbeat-fips, conftest, scorecard, podman, trivy, docker-cli-buildx-fips, trivy-fips, conftest-fips,...

Important Photon OS Security Update - PHSA-2026-5.0-0785

Updates of 'vim', 'docker-buildx', 'curl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0785

Updates of 'vim', 'curl', 'docker-buildx' packages of Photon OS have been released...

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-11065 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-11065 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28. A patched version of the package is available...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, extism, crossplane-provider-azure-sql, terraform-provider-azuread, argo-rollouts, docker-cli-buildx, dagger, crossplane-provider-aws-route53, wal-g, q, pulumi, terraform-provider-pagerduty, ksops, argo-workflows, argo-cd, grafana, gitsign,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, extism, crossplane-provider-azure-sql, terraform-provider-azuread, argo-rollouts, docker-cli-buildx, dagger, crossplane-provider-aws-route53, wal-g, q, pulumi, terraform-provider-pagerduty, ksops, argo-workflows, argo-cd, grafana, gitsign,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, livekit-cli, extism, grype-fips, crossplane-provider-aws-route53-fips, crossplane-provider-azure-sql, trivy-operator-fips, buildkitd-fips, crossplane-provider-aws-efs-fips, terraform-provider-azuread, vault, omnictl-multiarch, trufflehog-fips,...

AZL-76931 CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-75410 CVE-2025-11065 affecting package docker-buildx for versions less than 0.14.0-10

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75524 CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

openSUSE 16 Security Update : docker (openSUSE-SU-2026:20057-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20057-1 advisory. Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Updat...

Security update for docker (critical)

openSUSE security update: security update for docker ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20057-1 Rating: critical References: bsc1247367 bsc1247594 bsc1248373 bsc1250508 Cross-References: CVE-2025-54388 CVSS scores: CVE-2025-54388 SUSE :...

SUSE-SU-2026:20095-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

SUSE-SU-2026:20112-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

OPENSUSE-SU-2026:20057-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27. A patched version of the package is available...

AZL-71629 CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...