CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, hubble, docker-cli-fips, datadog-agent, step-ca-fips, azuredisk-csi-fips, docker-cli-buildx, gosu, calico, licenseclassifier, tekton-pipelines, openbao, falcoctl,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, flux-source-controller-fips, nginx-kubernetes-ingress-fips, tailscale, mattermost-fips, prometheus-postgres-exporter, cloud-provider-aws,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, hubble, docker-cli-fips, datadog-agent, step-ca-fips, azuredisk-csi-fips, docker-cli-buildx, gosu, calico, licenseclassifier, tekton-pipelines, openbao, falcoctl,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, flux-source-controller-fips, nginx-kubernetes-ingress-fips, tailscale, mattermost-fips, prometheus-postgres-exporter, cloud-provider-aws,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: kubecolor, lazygit, datadog-agent, azuredisk-csi-fips, gosu, calico, dapr, crossplane-provider-aws-wafv2, hello-world-golang, nri-couchbase-fips, trivy-operator, kube-mgmt-fips, trivy, localstack, azure-container-networking, k8s-device-plugin, authservice-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubecolor, lazygit, datadog-agent, azuredisk-csi-fips, gosu, calico, dapr, crossplane-provider-aws-wafv2, hello-world-golang, nri-couchbase-fips, trivy-operator, kube-mgmt-fips, trivy, localstack, azure-container-networking, k8s-device-plugin, authservice-fips,...

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

Summary A path traversal vulnerability Zip Slip exists in the media archive import feature. An authenticated user with owner-level privileges can craft a malicious ZIP file with directory-traversal filenames to write arbitrary files outside the intended temporary extraction directory on the...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-handler, virt-controller-fips...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-handler, virt-controller-fips...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-handler, virt-controller-fips...

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

PT-2026-32043

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 1.17.3 Description Arcane is an interface for managing Docker containers, images, networks, and volumes. The /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET...

arcane 代码问题漏洞

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.17.3 contained code vulnerabilities. These vulnerabilities stemmed from the /api/templates/fetch endpoint, which accepted URL parameters provided by callers and processed HTTP GET requests witho...

CVE-2026-39848 Dockyard's Unauthenticated Cron Endpoint in Dockyard Enables Container Enumeration and Database Manipulation

Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. A remote attacker can cause a logged-in administrator's browser to request /apps/action.php?action=stop&name= or...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, argo-rollouts, prometheus, crossplane-provider-aws-memorydb, kuberay-operator, opentelemetry-collector, k8sgpt, pulumi-language-dotnet, headlamp, grafana-alloy, keda, tekton-pipelines, cloud-provider-aws, external-secrets-operator,...

CLEANSTART-2026-UQ00642 Docker CLI for Windows searches for plugin binaries in C:\\ProgramData\\Docker\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the minio-operator-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-YR07499 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...