CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78669 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-78660 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78660 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-97032 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-97032 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

Astra Linux – Vulnerability in docker.io-app

Docker Compose relies on the path information embedded in remote OCI Compose artifacts. When a layer includes the annotations com.dockercompose.extends or com.dockercompose.envfile, Compose incorporates the value provided by the attacker from com.dockercompose.file/com.dockercompose.envfile into...

dockerd Go-Archive Arbitrary File Write

The vulnerability of the dockerd daemon in the Go-Archive library of the Docker Desktop command-line interface for developing and deploying container applications, as well as the Docker Compose tool for managing multi-container applications, is related to an incorrect definition of symbolic...

faraday

Gestor de Vulnerabilidades de Código Abierto La seguridad tiene dos tareas difíciles: diseñar formas inteligentes de obtener nueva información y hacer un seguimiento de los hallazgos para mejorar los esfuerzos de remediación. Con Faraday, puedes centrarte en descubrir vulnerabilidades mientras...

pentest_lab

Pentest Lab Ya no estoy desarrollando activamente esto, pero corregiré errores y revisaré issues y pull requests. Se agradece la ayuda : Este laboratorio de pentest local utiliza docker compose para levantar múltiples servicios víctimas y un servicio atacante que ejecuta Kali Linux. Si ejecutas...

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-81869 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-81869 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

reternal-quickstart

RE:TERNAL Nota: Todavía en desarrollo, solo usar para pruebas y ¡no exponer interfaces! El compose actual aún no funciona, solo intente si sabe lo que está haciendo RE:TERNAL es un servicio centralizado de orquestación de purple team para gestionar frameworks C2 de terceros. Los agentes se instal...

AZL-107348 CVE-2026-97032 affecting package docker-compose 2.27.0-14

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107345 CVE-2026-78669 affecting package docker-compose 2.27.0-14

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107357 CVE-2026-78660 affecting package docker-compose 2.27.0-14

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107363 CVE-2026-78663 affecting package docker-compose 2.27.0-14

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107354 CVE-2026-78659 affecting package docker-compose 2.27.0-14

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107360 CVE-2026-61801 affecting package docker-compose 2.27.0-14

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

AZL-107351 CVE-2026-92543 affecting package docker-compose 2.27.0-14

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

net.snowflake:spark-snowflake_2.11 (>=2.8.5-spark_2.3, <=2.8.6-spark_2.4), net.snowflake:spark-snowflake_2.12 (>=2.8.5-spark_2.4, <=2.8.6-spark_3.0) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.2)

net.snowflake:snowflake-jdbc MAVEN version 3.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.8.5-spark2.3, =2.8.5-spark2.4, =16.14.3, =16.14.3, =16.14.3,...