GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: eks-distro, zarf-fips, grafana-operator, ingress-nginx-controller-fips, k8s-device-plugin, cerbos, kube-conformance, ocm-kubernetes-controller-fips, grafana-alloy, docker-fips, apm-server-fips, cloud-provider-azure-fips, commercial-spilo, vault-secrets-operator,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, buildkitd, caddy, redka, snyk-cli, pulumi-language-dotnet, undock, zarf, hubble, dataplaneapi, prometheus, vexctl, karpenter, mattermost, scorecard, pulumi, grafana-operator, src, kubernetes-dashboard, traefik, opentofu, docker-cli-buildx, grype...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, omnictl-multiarch, packer-fips, knative-kafka-broker, omnictl-multiarch-fips, docker-cli-buildx-fips, nemo, knative-serving, tekton-pipelines, etcd-fips, opentelemetry-collector, kots, opentofu, elastic-agent-fips, etcd, podman,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, dagger, prometheus, vault-benchmark, zarf, cilium, flux-source-controller, docker-cli-buildx, go-discover, rootlesskit, k3s, istio, melange, kine, kubernetes, gomplate, containerd,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: zot, snyk-cli, prometheus, mattermost, kubernetes-dashboard, cilium, rancher, docker-cli-buildx, kaf, k3s, fscrypt, istio, kine, kubernetes, helm, podman, loki, cert-manager, cilium-cli, buildah, containerd, prometheus-operator, nerdctl, flux, kyverno,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, ctop, helm-exporter-fips,...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, hubble, kubevela, rancher-agent, zarf, aws-node-termination-handler, k8sgpt, tigera-operator, k8sgpt-operator, k9s, cilium, eksctl, kpt, cri-tools, docker-cli-buildx, argo-rollouts, rancher, kargo, postgres-operator, k3s, velero, k8ssandra-client,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, pulumi-language-yaml, pulumi-language-java, aws-flb-cloudwatch, gitlab-pages, kube-vip, hubble, lvm-driver, prometheus, authservice, rancher-agent, crossplane-provider-keycloak, timoni, vault-benchmark,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: spegel, k8s-device-plugin, flux-source-controller-fips, rancher-machine, trivy, newrelic-fluent-bit-output-fips, vendir, crossplane, newrelic-fluent-bit-output, buildkite-agent, osv-scanner, docker-cli, mesosphere-vsphere-csi, helm-exporter, hubble, azurefile-csi,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: spegel, k8s-device-plugin, flux-source-controller-fips, rancher-machine, trivy, newrelic-fluent-bit-output-fips, vendir, crossplane, newrelic-fluent-bit-output, buildkite-agent, osv-scanner, docker-cli, mesosphere-vsphere-csi, helm-exporter, hubble, azurefile-csi,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: gatus-fips, eks-distro, aws-fsx-csi-driver-fips, longhorn-manager-fips, kubernetes-ingress-defaultbackend, spegel, yace, blob-csi-fips, volsync, k8s-device-plugin, opentelemetry-operator, nri-f5-fips, flux-source-controller-fips, nri-rabbitmq, rancher-machine,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gatus-fips, eks-distro, aws-fsx-csi-driver-fips, longhorn-manager-fips, kubernetes-ingress-defaultbackend, spegel, yace, blob-csi-fips, volsync, k8s-device-plugin, opentelemetry-operator, nri-f5-fips, flux-source-controller-fips, nri-rabbitmq, rancher-machine,...