GitLeaks

GitLeaks Container Image Opinionated gitleaks build for secret scanning in local workflows and pipelines. Features Builds gitleaks from the tagged upstream source with pinned Go toolchains for reproducible binaries. GitLab CI Component at niclas-zone/ci/gitleaks. Usage Pull the image podman pull...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior. CVE| Component| Severity| Technique| Verification model ---|---|---|---|-...

dasel-melange-apko

dasel v3.3.1 — Melange + apko build, patched for CVE-2026-33320 This repo packages the dasel CLI v3.3.1 as an APK with Melange , builds a minimal container image with apko , and applies a fix for CVE-2026-33320 while staying on the v3.3.1 codebase a patch, not a version bump. The result is a 4 MB...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

cve-2018-17207

CVE-2018-17207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-17207 Image author: https://github.com/cved-sources/cve-2018-17207...

skopeo security, bug fix, and enhancement update

An update is available for skopeo. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, g...

RLSA-2026:97229 Important: skopeo security, bug fix, and enhancement update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload CVE-2026-41567 B...

cve-2016-7434

CVE-2016-7434 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-7434 Image author: https://github.com/opsxcq/exploit-CVE-2016-7434...

Critical: Red Hat Security Advisory: Red Hat Quay - 3.12.24

Red Hat Quay v3.12.24 Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.12.24. See the following Release Notes documentation for additional details about this release:...

Critical: Red Hat Security Advisory: Red Hat Quay - 3.14.10

Red Hat Quay v3.14.10 Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.14.10. See the following Release Notes documentation for additional details about this release:...

Critical: Red Hat Security Advisory: Red Hat Quay - 3.16.7

Red Hat Quay v3.16.7 Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.16.7. See the following Release Notes documentation for additional details about this release:...

Critical: Red Hat Security Advisory: Red Hat Quay - 3.9.28

Red Hat Quay v3.9.28 Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.9.28. See the following Release Notes documentation for additional details about this release:...

Critical: Red Hat Security Advisory: Red Hat Quay - 3.18.3

Red Hat Quay v3.18.3 Red Hat Quay is a container image registry for building, distributing, and deploying containers. This advisory contains the container images for Red Hat Quay 3.18.3. See the following Release Notes documentation for additional details about this release:...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.329 Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting...

Important: Red Hat Security Advisory: skopeo security, bug fix, and enhancement update

An update for skopeo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: skopeo security, bug fix, and enhancement update

An update for skopeo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

anchore-engine

Anchore Engine IMPORTANT NOTE As of 2023, Anchore Engine is no longer maintained. There will be no future versions released. Users are advised to use Syft and Grype. For users interested in a supported commercial solution for container scanning and complaiance, schedule a demo to see Anchore...

PT-2026-141721

Name of the Vulnerable Software and Affected Versions Podman affected versions not specified Description An issue exists where the auto-update mechanism improperly trusts metadata labels within a container image to determine which system services to restart. An attacker can provide a crafted...

RHEL 10 : skopeo (RHSA-2026:97229)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:97229 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify...