1304 matches found
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: conftest, kaniko, osv-scanner, zot, docker-compose, trivy, skaffold, trivy-operator, kubescape, docker-cli-buildx, guac, podman, scorecard, buildah...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: conftest, kaniko, osv-scanner, zot, docker-compose, trivy, skaffold, trivy-operator, kubescape, docker-cli-buildx, guac, podman, scorecard, buildah...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: conftest, kaniko, osv-scanner, zot, docker-compose, trivy, skaffold, trivy-operator, kubescape, docker-cli-buildx, guac, podman, scorecard, buildah...
CVE-2026-33747 vulnerabilities
Vulnerabilities for packages: conftest, zot, kubescape-server-fips, kaniko, kubescape, guac, trivy-operator-fips, kubescape-server, conftest-fips, docker-compose, osv-scanner, podman-fips, docker-cli-buildx, podman, trivy-fips, skaffold-fips, trivy-operator, docker-fips, docker-cli-buildx-fips,...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: conftest, zot, kubescape-server-fips, kaniko, kubescape, guac, trivy-operator-fips, kubescape-server, conftest-fips, docker-compose, osv-scanner, podman-fips, docker-cli-buildx, podman, trivy-fips, skaffold-fips, trivy-operator, docker-fips, docker-cli-buildx-fips,...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: conftest, zot, kubescape-server-fips, kaniko, kubescape, guac, trivy-operator-fips, kubescape-server, conftest-fips, docker-compose, osv-scanner, podman-fips, docker-cli-buildx, podman, trivy-fips, skaffold-fips, trivy-operator, docker-fips, docker-cli-buildx-fips,...
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: conftest, zot, kubescape-server-fips, kaniko, kubescape, guac, trivy-operator-fips, kubescape-server, conftest-fips, docker-compose, osv-scanner, podman-fips, docker-cli-buildx, podman, trivy-fips, skaffold-fips, trivy-operator, docker-fips, docker-cli-buildx-fips,...
DEBIAN-CVE-2026-33532
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
CVE-2026-33532
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
UBUNTU-CVE-2026-33532
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
CVE-2026-33532
Summary: CVE-2026-33532 affects the yaml JavaScript library. The vulnerability is in the compose/resolve phase of the parser, where a recursive call path without a depth bound can cause a RangeError: Maximum call stack size exceeded when parsing YAML input (typical payload ~2–10 KB). This can lea...
CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
CVE-2026-33532
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections
yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...
SUSE-SU-2026:20871-1 Security update for docker-compose
This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files bsc1252752...
MAL-2026-2145 Malicious code in compose-rl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d7bb3250324aea46c0121883650a393aeee3569ba3a3a8f202530bdc523a5735 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
PT-2026-28167
Name of the Vulnerable Software and Affected Versions yaml versions prior to 1.10.3 yaml versions prior to 2.8.3 Description The yaml library is susceptible to a stack overflow when parsing YAML documents. The issue occurs during the node resolution/composition phase, which uses recursive functio...
PT-2026-41141
Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.33.0 through 2.33.7 Portainer Community Edition versions 2.39.0 through 2.39.1 Portainer Community Edition versions prior to 2.41.0 Description Portainer supports deploying stacks from Git repositories...
Heimdall: Path received via Envoy gRPC corrupted when containing query string
Summary When using heimdall in envoy gRPC decision API mode, wrong encoding of the query URL string allows rules with non-wildcard path expressions to be bypassed. The HTTP based decision API is NOT affected, and proxy mode is NOT affected either. Note: The issue can only lead to unintended acces...
