Docker-Security

डॉकर सुरक्षा यह OWASP Docker Top 10 है। यह एक कार्य प्रगति पर है। इस दस्तावेज़ के बारे में यह दस्तावेज़ एक सुरक्षित कंटेनरीकृत वातावरण बनाने के लिए 10 सबसे महत्वपूर्ण सुरक्षा बिंदुओं का वर्णन करता है। आप इसे एक विनिर्देश पत्र के रूप में उपयोग कर सकते हैं यदि आप शुरुआत से शुरू कर रहे हैं, या इसे...

dockerscan

DockerScan v2.0 O Scanner de Segurança Docker Mais Abrangente...

dockle

Dockle - أداة فحص صور الحاويات للأمان، تساعد في بناء أفضل صورة Docker وفقًا لأفضل الممارسات، سهلة البدء Dockle يساعدك في: 1. بناء صور Docker وفقًا لأفضل الممارسات 2. بناء صور Docker آمنة تشمل نقاط التفتيش معايير CISbash $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ brew insta...

CVE-2026-55581

mcp-shell is an MCP server for running shell commands securely. Prior to 0.6.0 , the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell -c flag. A caller of the shel...

vulnerable-container-hub

OWASP कमजोर कंटेनर हब प्रोजेक्ट पृष्ठभूमि सुरक्षा सीखने के इच्छुक लोगों के लिए वेब एप्लिकेशन, कंटेनर या वर्चुअल मशीन जैसे कमजोर वातावरण प्रदान करने वाले कई रिपॉजिटरी मौजूद हैं, क्योंकि यह न केवल छात्रों या क्षेत्र में हाल ही में शामिल हुए किसी व्यक्ति को प्रासंगिक सुरक्षा तकनीकों को सीखने में मदद...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

EUVD-2026-31484

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Summary When a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with daemon host root privileges. Details When handling PUT /containers/id/archive requests with compressed archives, the daemon decompresses them using external system binaries. Due to...

PT-2026-41036

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.33.0 through 2.33.7 Portainer Community Edition versions 2.39.0 through 2.39.1 Portainer Community Edition versions 2.40.0 through 2.40.x Portainer Community Edition versions prior to 2.33.0 Description...

EUVD-2020-21940

Malware in sbrugna...

EUVD-2019-0160

Malware in sbrugna...

EUVD-2024-52170

Malicious code in bioql PyPI...

CVE-2025-54410 Moby's Firewalld reload removes bridge network isolation

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

SUSE-SU-2025:02366-2 Security update for docker

This update for docker fixes the following issues: Update to Docker 28.2.2-ce bsc1243833, bsc1242114: - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction bsc1241830. Other bugfixes: - Always clear SUSEConnect sus...

CVE-2025-53372

CVE-2025-53372 concerns the node-code-sandbox-mcp MCP Server (Node.js) prior to version 1.3.0, which is vulnerable to command injection through unsanitized input used in a call to a shell command via child_process.execSync. Exploitation can allow remote code execution with the server process’s pr...

PT-2025-25764 · Unknown +3 · Portainer Community Edition +4

Name of the Vulnerable Software and Affected Versions: Portainer Community Edition versions prior to 2.31.0 STS and prior to 2.27.7 LTS Description: The issue affects a lightweight service delivery platform for containerized applications, allowing management of Docker, Swarm, Kubernetes, and ACI...

SUSE-SU-2025:20393-1 Security update for docker

This update for docker fixes the following issues: Always clear SUSEConnect suse secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with...

PT-2025-20883 · Undefined · Undefined

2025-05-13 19:01:23.477089 UTC +09:00 1. CVE-2025-41645 CERTVDE SMA: Sunny Portal demo system privilege escalation An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake. https://vulners.com/cve/CVE-2025-41645...

Important: docker

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2 : docker (ALASECS-2025-061)

The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-061 advisory. In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection...