175 matches found
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...
CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3
CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...
CVE-2026-6406
The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...
AZL-87663 CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...
[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
GHSA-PC3F-X583-G7J2 vulnerabilities
Vulnerabilities for packages: consul-k8s, cilium, hubble, kubevela, eksctl, gitlab-kas, sonobuoy, postgres-operator, vcluster, headlamp, k3s, kots, docker-cli-buildx, argo-rollouts, istio, k8sgpt, kiali, aws-node-termination-handler, cert-manager-istio-csr, kubernetes, linkerd2,...
[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)
Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: go, gitsign, cloud-sql-proxy, eksctl, gitlab-kas, rancher-helm, flux-source-controller, envconsul, witness, weaviate, caddy, cloud-provider-vsphere, grpc-health-probe, dkron, dask-gateway, crossplane-provider-keycloak, apko, flux-notification-controller,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: cerbos, extism, cephcsi-fips, gatekeeper-fips, flux-source-watcher, tofu-controller-fips, vault-fips, vault-secrets-operator, gitea-fips, malcontent, gitlab-workhorse-ce, cilium, helm-mapkubeapis, atlantis-fips, sonobuoy-fips, openbao, tigera-operator, nsc,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: cerbos, extism, cephcsi-fips, gatekeeper-fips, flux-source-watcher, tofu-controller-fips, vault-fips, vault-secrets-operator, gitea-fips, malcontent, gitlab-workhorse-ce, cilium, helm-mapkubeapis, atlantis-fips, sonobuoy-fips, openbao, tigera-operator, nsc,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy-fips, logstash-exporter, cerbos, pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, extism, cephcsi-fips, agentbeat, gatekeeper-fips, haproxy-ingress, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, chronyexporte...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy-fips, logstash-exporter, cerbos, pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, extism, cephcsi-fips, agentbeat, gatekeeper-fips, haproxy-ingress, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, chronyexporte...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy-fips, logstash-exporter, cerbos, pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, extism, cephcsi-fips, agentbeat, gatekeeper-fips, haproxy-ingress, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, chronyexporte...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: crossplane-provider-family-aws, kubevela, azcopy, cloud-sql-proxy, eksctl, gitlab-kas, flux-source-controller, haproxy-ingress, weaviate, caddy, cloud-provider-vsphere, docker-compose, opa, dkron, grafana-alloy, flux-notification-controller, jaeger-operator, dive,...
CLEANSTART-2026-CO68219 Docker CLI for Windows searches for plugin binaries in C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ProgramData\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Docker\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cli-plugins, a directory that does not exist by default
Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: kaniko, conftest, podman, buildah, skaffold, trivy, scorecard, osv-scanner, guac, trivy-operator, zot, docker-compose, docker-cli-buildx, kubescape...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: kaniko, conftest, podman, buildah, skaffold, trivy, scorecard, osv-scanner, guac, trivy-operator, zot, docker-compose, docker-cli-buildx, kubescape...