8 matches found
CVE-2025-36105
Affected product: IBM Planning Analytics Advanced Certified Containers (versions 3.1.0–3.1.4). Description: local privileged user can obtain sensitive information from environment variables due to cleartext storage in env vars (CWE-526). Impact: information disclosure at a local level. Mitigation...
AZL-77976 CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-6
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...
EUVD-2006-5341
Malware in sbrugna...
EUVD-2022-0858
Malicious code in bioql PyPI...
Azure Linux 3.0 Security Update: flux / kata-containers / kata-containers-cc / rust / virtiofsd (CVE-2024-43806)
The version of flux / kata-containers / kata-containers-cc / rust / virtiofsd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43806 advisory. - Rustix is a set of safe Rust bindings to POSIX-ish...
MGASA-2021-0412 Updated opencontainers-runc packages fix security vulnerability
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition...
Kata Containers Backlink Vulnerability
Kata Containers is an open source lightweight virtual machine builder from the Kata Containers community. A backlink vulnerability in Kata Containers versions prior to 1.11.0, which stems from a networked system or product that does not properly filter filenames of links or shortcuts that represe...