OPENSUSE-SU-2026:11765-1 docker-29.7.2_ce-41.1 on GA media

These are all security issues fixed in the docker-29.7.2ce-41.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-50025

Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: grype, datadog-agent-fips, grype-db, newrelic-infrastructure-agent-fips, neuvector-fips, helm-operator, chainctl, kube-arangodb, docker-compose-fips, cluster-api-helm-controller, crossplane-cli-fips, kubescape-server, rancher-helm, amazon-ecs-agent-fips,...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: grype, datadog-agent-fips, grype-db, newrelic-infrastructure-agent-fips, neuvector-fips, helm-operator, chainctl, kube-arangodb, docker-compose-fips, cluster-api-helm-controller, crossplane-cli-fips, kubescape-server, rancher-helm, amazon-ecs-agent-fips,...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: k9s, k3s, manifest-tool, k8sgpt, syft, buildkitd, helm-push, k8ssandra-client, zarf, helm-mapkubeapis, rancher-helm, grype, kubevela, xeol, kubescape-operator, spegel, neuvector-scanner, gatekeeper, docker-compose, nerdctl, newrelic-infrastructure-agent, helm,...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: k9s, k3s, manifest-tool, k8sgpt, syft, buildkitd, helm-push, k8ssandra-client, zarf, helm-mapkubeapis, rancher-helm, grype, kubevela, xeol, kubescape-operator, spegel, neuvector-scanner, gatekeeper, docker-compose, nerdctl, newrelic-infrastructure-agent, helm,...

CVE-2026-54248: Improper Verification of Cryptographic Signature

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...

Open Redirect

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Open Redirect in the Docker registry pagination handling, which follows the URL given in an HTTP Link header while still attaching the registry credentials, without confining the follow to the original...

CVE-2026-88889

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...

CVE-2026-88888

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88885

Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. Attackers can inject shell metacharacters through malicious dependency names to execute arbitrary...

CVE-2026-88888

A flaw was found in Renovate. Attackers can exploit a command injection vulnerability in the Mix manager by injecting shell metacharacters through malicious package names when processing private dependencies with unescaped organization parameters. This allows for the execution of arbitrary comman...

CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...

CVE-2026-88889

Renovate (dependency update automation tool) versions before 44.14.7 contain a command injection vulnerability in the Maven Wrapper manager . An unescaped distributionType parameter in maven-wrapper.properties allows attackers to inject shell commands, leading to remote code execution when Renova...

CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

EUVD-2026-75438

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88888

Renovate before 44.14.7 is affected by a command injection vulnerability in the Mix manager . The root cause is unescaped organization parameters when processing private dependencies, allowing attackers to inject shell metacharacters through malicious package names. Successful exploitation enable...

CVE-2026-88886 Renovate before 44.14.7 Command Injection via gradle-wrapper

Renovate is a dependency update automation tool. In versions before 44.14.7 and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-enterprise-edition Helm chart before 10.4.0, the manager/gradle-wrapper module does not escape the distributionUrl value read from a repository...