150 matches found
go-pillage-registries
go-pillage-registries This project takes a Docker registry and pillages the manifest and configuration for each image in its catalog. It uses Google's crane command's package, which should follow docker's keychain semantics. If you would like to override this, just change authn.DefaultKeychain as...
crane-0.22.1-2.1 on GA media (moderate)
crane-0.22.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11960-1 Rating: moderate Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-63209 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
PT-2026-105669
These are all security issues fixed in the crane-0.22.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11960-1 crane-0.22.1-2.1 on GA media
These are all security issues fixed in the crane-0.22.1-2.1 package on the GA media of openSUSE Tumbleweed...
CLEANSTART-2026-WJ82111 Security fix for GHSA-p436-gjf2-799p applied in: buildkitd 0.26.3-r1, crane 0.18.0-r1, crane 0.19.2-r0, crane 0.20.7-r1
GHSA-p436-gjf2-799p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AH15669 Security fix for GHSA-259r-337f-4rfw applied in: crane 0.19.2-r1, crane 0.20.7-r3, crane 0.20.7-r4
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KG96538 Security fix for GHSA-jq35-85cj-fj4p applied in: crane 0.19.2-r0
Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-IQ97259 Security fix for GHSA-4vq8-7jfc-9cvp applied in: crane 0.19.2-r0
Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KB70084 Moby is an open source container framework developed by Docker Inc
Security vulnerability affects the crane package. Moby is an open source container framework developed by Docker Inc...
CLEANSTART-2026-SP18128 Moby is an open-source project created by Docker to enable software containerization
Security vulnerability affects the crane package. Moby is an open-source project created by Docker to enable software containerization...
CLEANSTART-2026-PY60272 Security fix for GHSA-xw73-rw38-6vjc applied in: crane 0.19.2-r0
Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PX86725 Security fix for GHSA-v23v-6jw2-98fq applied in: crane 0.19.2-r0
Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OZ76094 Moby is an open-source project created by Docker for software containerization
Security vulnerability affects the crane package. Moby is an open-source project created by Docker for software containerization...
CLEANSTART-2026-PI24714 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
Security vulnerability affects the crane package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...
CLEANSTART-2026-QU91464 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
Security vulnerability affects the crane package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
CLEANSTART-2026-HZ31792 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
Security vulnerability affects the crane package. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...
CLEANSTART-2026-TC24088 Security fix for GHSA-x744-4wpc-v9h2 applied in: crane 0.18.0-r1, crane 0.19.2-r0
GHSA-x744-4wpc-v9h2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AP95422 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
Security vulnerability affects the crane package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
CLEANSTART-2026-PB65186 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
Security vulnerability affects the crane package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...
CLEANSTART-2026-VH11808 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations
Security vulnerability affects the crane package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...