CVE-2026-44218 ciguard: Container image runs as root (no USER directive)

ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dockerfile lacks a USER directive. This vulnerability is fixed in 0.8.2...

CVE-2026-44218 ciguard: Container image runs as root (no USER directive)

ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dockerfile lacks a USER directive. This vulnerability is fixed in 0.8.2...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.65 security and extras update

Red Hat OpenShift Container Platform release 4.14.65 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

EUVD-2026-29512

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

io.antmedia:ant-media-server (>=2.6.3, <=2.7.0), org.apache.tomcat:tomcat-catalina-ha (8.5.90) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.90)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - io.antmedia:ant-media-server =2.6.3, =2.7.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.90 -...

com.bsb.common.vaadin:com.bsb.common.vaadin.embed (>=0.1, <=0.4), com.bsb.common.vaadin:com.bsb.common.vaadin7.embed (0.4) +9 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.26)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.bsb.common.vaadin:com.bsb.common.vaadin.embed =0.1, =3.0.0, =0.9.10.m2, =1.9.5, =2.5.0,...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.34), org.crazyyak.dev:yak-dev-demo (>=1.4.0, <=1.4.1) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.34 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.34), org.crazyyak.dev:yak-dev-demo (>=1.4.0, <=1.4.1) +6 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.34 -...

net.moznion:donovan (1.0.0), org.apache.tomcat:tomcat-catalina-ha (8.0.21) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.21)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.moznion:donovan 1.0.0 - org.apache.tomcat:tomcat-catalina-ha 8.0.21 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.91), org.apache.tomcat:tomcat-catalina-ws (8.5.91) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.91)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.91 - org.apache.tomcat:tomcat-catalina-ws 8.5.91 -...

io.antmedia:ant-media-server (>=2.6.3, <=2.7.0), org.apache.tomcat:tomcat-catalina-ha (8.5.90) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.90)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - io.antmedia:ant-media-server =2.6.3, =2.7.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.90 -...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43513 Source advisory...

org.apache.tomcat:tomcat-catalina-ha (8.0.8), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.8) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.8 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

org.apache.tomcat:tomcat-catalina-ha (8.5.91), org.apache.tomcat:tomcat-catalina-ws (8.5.91) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.91)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.91 - org.apache.tomcat:tomcat-catalina-ws 8.5.91 -...

org.akhikhl.gretty:gretty-runner-tomcat8 (1.0.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.8) +5 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.akhikhl.gretty:gretty-runner-tomcat8 1.0.0 -...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-42498 Source advisory...

org.apache.tomcat:tomcat-catalina-ha (8.0.8), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.8) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.8 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

com.github.psi-probe:psi-probe-tomcat85 (3.5.7), org.apache.tomcat:tomcat-catalina-ha (8.5.75) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.75)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.7 - org.apache.tomcat:tomcat-catalina-ha 8.5.75 ...

net.myrrix:myrrix-web (0.11), net.myrrix:myrrix-web-common (0.11) +12 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.39)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.11 - net.myrrix:myrrix-web-common 0.11 -...

com.ovea.tajin.server:tajin-server-jetty8 (>=1.0.b1, <=1.0.b11), com.ovea.tajin.server:tajin-server-jetty9 (>=1.0.b1, <=1.0.b11) +10 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.ovea.tajin.server:tajin-server-jetty8 =1.0.b1, =1.0.b1, =4.7.1, =3.2.1, =1.2.0.beta1,...