GO-2026-4859 vulnerabilities

Vulnerabilities for packages: kubescape, podman, osv-scanner, skaffold, zot, docker-cli-buildx, trivy, kaniko, conftest, scorecard, buildah, guac, trivy-operator, docker-compose...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: kubescape, podman, osv-scanner, skaffold, zot, docker-cli-buildx, trivy, kaniko, conftest, scorecard, buildah, guac, trivy-operator, docker-compose...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kots, sops, cloud-provider-azure, harbor, ingress-nginx-controller, net-kourier, litestream, aws-efs-csi-driver, crossplane-provider-family-azure, neuvector-scanner, rancher-helm, gitlab-runner, k9s, cass-operator, spqr, emissary, kubescape, argocd-image-updater,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kots, sops, crossplane-provider-family-azure, pulumi, crossplane-provider-aws-eks, gitlab-runner, k9s, teleport, pulumi-language-yaml, kubescape, argocd-image-updater, mattermost, terraform-provider-tls, kubernetes-dashboard, terraform-provider-acme, datadog-agent,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, zot, tkn, witness, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl, flux-source-controller, zarf,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ratify, slsa-verifier, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, nri-f5, kind, emissary, nri-apache, spire-controller-manager, kubernetes-dashboard, aws-otel-collector, oauth2-proxy, migrate, kubernetes-csi-driver-hostpath, kubernetes-dashboard-api, aws-application-networking-k8s, eksctl,...

Exploit for CVE-2026-17106

CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: dataplaneapi-fips, eks-distro-fips, authentik, cerbos-fips, ingress-nginx-controller-fips, rke2-runtime-fips, cilium-envoy-fips, commercial-spilo, podman-fips, knative-kafka-broker-fips, terraform-fips, ocm-cli-fips, kyverno-policy-reporter-plugins-kyverno, snyk-cli,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kots, glab, pinact, libnvidia-container, pulumi-language-dotnet, melange, redka, src, pulumi, cerbos, dataplaneapi, cilium-cli, k3s, pulumi-language-yaml, telegraf, kyverno, mattermost, helm, kubernetes, kubernetes-dashboard, buildkitd, apko, traefik,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: minio, podman-fips, knative-kafka-broker-fips, terraform-fips, vault, snyk-cli, tigera-operator, tekton-pipelines-fips, external-secrets-operator-fips, rancher, external-secrets-operator, frankenphp-8.4, fscrypt, kube-conformance, flux, kine, kots, commercial-grafana...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kots, sops, crossplane-provider-family-azure, pulumi, gitlab-runner, k9s, teleport, pulumi-language-yaml, kubescape, argocd-image-updater, mattermost, terraform-provider-tls, kubernetes-dashboard, datadog-agent, syft, kargo, crossplane-provider-azure-authorization,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kots, rancher, cilium-cli, spire-server, telegraf, kyverno, mattermost, helm, kubernetes, kubernetes-dashboard, zot, knative-serving, buildah, podman, fscrypt, opentelemetry-collector, gitlab-kas, flux, kine, docker-cli-buildx, aactl, external-dns, containerd,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kube-mgmt, kubescape-operator, helm-set-status, docker-fips, consul-k8s, tigera-operator, tekton-pipelines-fips, scorecard, trivy-fips, wolfictl, spegel-fips, rancher, chartmuseum, kgateway-fips, trivy-operator-fips, kaniko-fips, trivy, harvester, kots, rancher-agent...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kube-mgmt, kubescape-operator, helm-set-status, docker-fips, consul-k8s, tigera-operator, scorecard, trivy-fips, wolfictl, spegel-fips, rancher, chartmuseum, kgateway-fips, trivy-operator-fips, kaniko-fips, trivy, harvester, kots, rancher-agent, gitlab-rails-ce,...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...