13209 matches found
Security update for docker-stable
This update for docker-stable fixes the following issues: CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...
SUSE-SU-2026:1118-1 Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904...
SUSE-SU-2026:20949-1 Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...
SUSE-SU-2026:20976-1 Security update for docker-compose
This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: buildah, docker-compose, conftest, zot, podman, osv-scanner, skaffold, trivy, kubescape, guac, kaniko, trivy-operator, scorecard, docker-cli-buildx...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: buildah, docker-compose, conftest, zot, podman, osv-scanner, skaffold, trivy, kubescape, guac, kaniko, trivy-operator, scorecard, docker-cli-buildx...
CVE-2026-33747 vulnerabilities
Vulnerabilities for packages: buildah, docker-compose, conftest, zot, podman, osv-scanner, skaffold, trivy, kubescape, guac, kaniko, trivy-operator, scorecard, docker-cli-buildx...
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: buildah, docker-compose, conftest, zot, podman, osv-scanner, skaffold, trivy, kubescape, guac, kaniko, trivy-operator, scorecard, docker-cli-buildx...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: kubescape-server, skaffold-fips, kaniko, trivy-fips, trivy-operator-fips, livekit-cli, zot, kaniko-fips, skaffold, conftest, docker-compose, scorecard, cloudbeat, trivy, docker-cli-buildx-fips, osv-scanner, kubescape-server-fips, docker-fips, guac, kubescape, podman,...
CVE-2026-33747 vulnerabilities
Vulnerabilities for packages: kubescape-server, skaffold-fips, kaniko, trivy-fips, trivy-operator-fips, livekit-cli, zot, kaniko-fips, skaffold, conftest, docker-compose, scorecard, cloudbeat, trivy, docker-cli-buildx-fips, osv-scanner, kubescape-server-fips, docker-fips, guac, kubescape, podman,...
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: kubescape-server, skaffold-fips, kaniko, trivy-fips, trivy-operator-fips, livekit-cli, zot, kaniko-fips, skaffold, conftest, docker-compose, scorecard, cloudbeat, trivy, docker-cli-buildx-fips, osv-scanner, kubescape-server-fips, docker-fips, guac, kubescape, podman,...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: kubescape-server, skaffold-fips, kaniko, trivy-fips, trivy-operator-fips, livekit-cli, zot, kaniko-fips, skaffold, conftest, docker-compose, scorecard, cloudbeat, trivy, docker-cli-buildx-fips, osv-scanner, kubescape-server-fips, docker-fips, guac, kubescape, podman,...
PYSEC-2026-157
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
PYSEC-2026-157
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
CVE-2026-33744
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
CVE-2026-33744 BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
CVE-2026-33744
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
CVE-2026-33744
CVE-2026-33744 affects BentoML versions prior to 1.4.37. The issue arises when the docker.system_packages field in bentofile.yaml is interpolated into Dockerfile RUN commands without sanitization, allowing arbitrary shell commands to execute during bentoml containerize or docker build. Impact is ...
CVE-2026-33744 BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the docker.systempackages field in bentofile.yaml accepts arbitrary strings that are interpolated directly into Dockerfile RUN commands without sanitization. Since...
CVE-2026-33744
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the "docker.systempackages" field in "bentofile.yaml" accepts arbitrary strings that are interpolated directly into Dockerfile "RUN" commands without sanitization. Since...