556 matches found
CVE-2026-61711
A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...
FRAGNESIA-Charan-cve-2026-46300
Charantej 아키텍처: 강화된 컨테이너 스테이징 및 시스템 콜 원격 측정 연구소 엔터프라이즈급, 심층 방어 컨테이너 격리 및 런타임 보안 원격 측정 프레임워크. Cisco 수석 사이버보안 아키텍트의 관점에서 설계된 Charantej 아키텍처는 스테이징 런타임을 격리하고, 시스템 콜 표면을 제한하며, 호스트 수준 감사를 사용하여 실시간 커널 원격 측정을 계측함으로써 현대 리눅스 컨테이너 배포를 보호합니다. High-Level Design HLD Charantej 아키텍처는 격리, 최소 권한 격리 및 대역 외 모니터링을 적용...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – Exploit del Toolkit Container NVIDIA completamente armato Riferimenti https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
Threat_Model_Examples
Esempi di Modelli di Minaccia Questo repository contiene vari esempi di modelli di minaccia per diverse tecnologie e sistemi. Queste risorse forniscono esempi illustrativi di modelli di minaccia in diversi ambiti, aiutando i professionisti della sicurezza, gli sviluppatori e i ricercatori a...
github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
CVE-2026-62313
Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...
BuildKit: Custom frontend could bypass Seccomp/AppArmor
Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...
CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: superset, openstack-keystone-2026.1-fips, openstack-horizon-2025.2, openstack-placement-2025.2, apache-beam-python-3.14-sdk, openstack-keystone-2025.1-fips, openstack-nova-2026.1, openstack-horizon-2026.1, openstack-glance-2025.1-fips, openstack-nova-2025.1,...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, wave-fips, verticadb-operator, crossplane-provider-aws-serverlessrepo, sonobuoy, crossplane-provider-aws-account, newrelic-nri-kube-events-fips, chainloop-artifact-cas-fips, grafana-alloy, frankenphp-8.2, crossplane-provider-terraform,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: buildkitd, nri-f5, kubernetes-csi-driver-hostpath, kubevela, pluto, crossplane-provider-aws-rds, pinact, helm-mapkubeapis, k3s, kube-vip, manifest-tool, tekton-chains, speedtest-go, aws-privateca-issuer, nri-jmx, hcloud, rancher-system-upgrade-controller, gh,...
GO-2026-6089 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, wave-fips, verticadb-operator, crossplane-provider-aws-serverlessrepo, sonobuoy, crossplane-provider-aws-account, newrelic-nri-kube-events-fips, chainloop-artifact-cas-fips, grafana-alloy, frankenphp-8.2, crossplane-provider-terraform,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: containerd, zot, k3d, k8s-device-plugin, spire-server, falco-no-driver, kots, kyverno, k3s, snyk-cli, aactl, nerdctl...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, volsync, crossplane-provider-aws-datapipeline, kube-metrics-adapter, node-feature-discovery-fips, rancher-fleet, crossplane-provider-aws-swf-fips, bazelisk, k8s-driver-manager, thanos-operator, gostatsd, athenz-csi-driver-fips, cosign-fips,...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, wave-fips, verticadb-operator, crossplane-provider-aws-serverlessrepo, sonobuoy, crossplane-provider-aws-account, newrelic-nri-kube-events-fips, chainloop-artifact-cas-fips, grafana-alloy, frankenphp-8.2, crossplane-provider-terraform,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, volsync, crossplane-provider-aws-datapipeline, kube-metrics-adapter, node-feature-discovery-fips, rancher-fleet, crossplane-provider-aws-swf-fips, bazelisk, k8s-driver-manager, thanos-operator, gostatsd, athenz-csi-driver-fips, cosign-fips,...
CVE-2026-63308 vulnerabilities
Vulnerabilities for packages: helm...