363 matches found
PT-2026-110081
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-110076
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-110079
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-110083
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-110080
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-110075
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
Fedora 46 : docker-buildx (2026-934d570022)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-934d570022 advisory. Automatic update for docker-buildx-0.37.2-1.fc46. Changelog Wed Sep 30 2026 Bradley G Smith - 0.37.2-1 - Update to release v0.37.2 - Resolves:...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: eksctl, k8sgpt, kubescape-operator, skaffold, falco-no-driver, headlamp, helm-operator, helm-set-status, nerdctl, syft, docker-cli-buildx, kubevela, kaniko, spegel, dagger, zot, steampipe, helm-push, kargo, helm-mapkubeapis, kubescape, chartmuseum, buildkitd,...
AZL-99195 CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99198 CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
AZL-98358 CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:3668-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3668-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, goreleaser, kube-fluentd-operator, docker-credential-acr-env, karpenter, cloud-provider-azure, crossplane-provider-azure-sql, opa-envoy, argo-rollouts, docker-cli-buildx, nri-kubernetes, net-kourier, crossplane-provider-aws-route53,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: eksctl, rancher-machine, skaffold, splunk-otel-collector, crossplane-provider-azure-sql, nerdctl, falcoctl, docker-cli-buildx, dagger, crossplane-provider-aws-route53, kine, gitlab-pages, opentelemetry-collector, wal-g, pulumi, tekton-chains, slsa-verifier, ksops,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: goreleaser, skaffold, falcoctl, docker-cli-buildx, ko, zot, vexctl, sigstore-scaffolding, tekton-chains, kubescape, tflint, policy-controller, aactl, gitsign, witness, flux-source-controller, neuvector-sigstore-interface, cosign, tkn, zarf, teleport, ratify,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: goreleaser, skaffold, falcoctl, docker-cli-buildx, ko, zot, kyverno, vexctl, sigstore-scaffolding, tekton-chains, kubescape, slsa-verifier, buildkitd, tflint, policy-controller, aactl, gitsign, crossplane, witness, flux-source-controller, neuvector-sigstore-interface...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: eksctl, rancher-system-upgrade-controller, kubernetes-csi-external-health-monitor, thanos-operator, oauth2-proxy, cni-plugins, k8sgateway, falcoctl, docker-cli-buildx, docker-credential-gcr, wal-g, clickhouse-operator, dgraph, pluto, tekton-chains, nri-redis,...
