GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, coder-fips, argo-events, rancher-agent, gatekeeper, cilium-cli, mapotf-fips, flux-image-automation-controller, argocd-image-updater, commercial-expanso-edge, mattermost-fips, seaweedfs-rocksdb-fips, gomplate-fips, loki, gitlab-rails-ce, peerdb-flo...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gatekeeper, cilium-cli, crossplane-provider-azure-operationalinsights, crossplane-provider-azure-sql, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-secretsmanager, crossplane-provider-azure-storagesync, step-kms-plugin-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatekeeper, cilium-cli, crossplane-provider-azure-operationalinsights, crossplane-provider-azure-sql, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-secretsmanager, crossplane-provider-azure-storagesync, step-kms-plugin-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: rancher-agent, gatekeeper, cilium-cli, commercial-expanso-edge, mattermost-fips, loki, gitlab-rails-ce, traefik-fips, zitadel, knative-kafka-broker, podman, argo-workflows, containerd, fscrypt, prometheus-fips, docker-cli-buildx-fips, nemo, omnictl-multiarch, istio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nfpm, dagger, sops, k3s, falcoctl, loki, openbao, docker-cli-buildx, skaffold, external-dns, terragrunt, docker, istio, tflint, pulumi, opentofu, knative-serving, flux-kustomize-controller, gatus, snyk-cli, nerdctl, steampipe, aactl, chezmoi, nuclei, kyverno,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: nfpm, dagger, k3s, loki, docker-cli-buildx, skaffold, external-dns, terragrunt, docker, istio, pulumi, opentofu, knative-serving, gatus, snyk-cli, nerdctl, aactl, chezmoi, nuclei, gptscript, kyverno, gitea, podman, pulumi-language-dotnet, kaf, helm, act, rancher,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: nfpm, dagger, sops, k3s, falcoctl, loki, openbao, docker-cli-buildx, skaffold, external-dns, terragrunt, docker, istio, tflint, pulumi, opentofu, knative-serving, flux-kustomize-controller, gatus, snyk-cli, nerdctl, steampipe, aactl, chezmoi, nuclei, kyverno,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kubernetes, k3s, kaf, helm, loki, podman, docker-cli-buildx, rancher, mattermost, kine, external-dns, telegraf, spire-server, opentelemetry-collector, cilium, cilium-cli, istio, cloud-provider-aws, cert-manager, knative-serving, prometheus, flux, fscrypt, kots,...

CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRETKEYBASE=OVERWRITEME as the default Rails master key. Combined with cookiesserializer = :marshal, this gives any logged-in user a deterministic...

CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRETKEYBASE=OVERWRITEME as the default Rails master key. Combined with cookiesserializer = :marshal, this gives any logged-in user a deterministic...

CVE-2026-46386

OpenProject’s official docker image ships SECRET_KEY_BASE=OVERWRITE_ME and cookies_serializer = :marshal, creating a deterministic Marshal-deserialization path reachable via the /my/two_factor_devices cookie reader. This enables potential pre-authentication remote code execution, as noted in the ...

CVE-2026-54232

A flaw was found in vLLM, an inference and serving engine for large language models LLMs. This vulnerability, a dependency confusion attack, allows a remote attacker to execute arbitrary code with root privileges during the Docker build process. By exploiting this, an attacker can compromise the...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: spdx-tools-java, apache-nifi-registry, ontop, nacos-docker, zipkin, management-api-for-apache-cassandra-4.0, localstack, wazuh-indexer, apicurio-registry-fips, spark-kubernetes-operator, ruby3.2-jrjackson, nextflow, jmeter, conductor-fips, flyway, knative-kafka-broke...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, apache-nifi-registry, ontop, nacos-docker, zipkin, management-api-for-apache-cassandra-4.0, localstack, wazuh-indexer, apicurio-registry-fips, spark-kubernetes-operator, ruby3.2-jrjackson, nextflow, jmeter, conductor-fips, flyway, knative-kafka-broke...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: logstash, wavefront-proxy, apache-pulsar, infinispan, zookeeper, ruby3.2-jrjackson, akhq, apicurio-registry, cassandra-reaper, kafka, kserve-modelmesh, solr, opensearch, spdx-tools-java, apache-tika, neo4j, gradle, airflow, dependency-track, scala,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: logstash, wavefront-proxy, apache-pulsar, infinispan, zookeeper, ruby3.2-jrjackson, akhq, apicurio-registry, cassandra-reaper, kafka, kserve-modelmesh, solr, opensearch, spdx-tools-java, apache-tika, neo4j, gradle, airflow, dependency-track, scala,...

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-2026:2579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2579-1 advisory. - CVE-2026-33997: Fixed privilege validation bypass during plugin bsc1265907. - CVE-2026-34040: Fixed Authz zero length regression...

Fedora 43 : docker-buildx (2026-3cca6f41d4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3cca6f41d4 advisory. - Update to release v0.35.0 - Resolves: rhbz2487819 - Resolves CVE-2026-39828: rhbz2489918, rhbz2490102 - Upstream enhancements, new features, and...

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:2578-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2578-1 advisory. This update for docker-stable fixes the following issues - CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages...

Fedora 44 : docker-buildkit (2026-1e00728616)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1e00728616 advisory. - Update to release v0.31.0 - Resolve CVE-2026-39829: rhbz2489939, rhbz2490056 - Upstream new features and fixes Tenable has extracted the preceding...