Arbitrary Code Injection

Overview bentoml is a BentoML: Build Production-Grade AI Applications Affected versions of this package are vulnerable to Arbitrary Code Injection via the systempackages handling in the Dockerfile generation and image command paths. An attacker can execute arbitrary shell commands during bentoml...

GHSA-46XP-26XH-HPQH vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller, virt-handler-fips, virt-api-fips, docker-machine-driver-harvester, virt-launcher, virt-operator, virt-controller-fips, virt-handler, virt-api...

CVE-2025-64437 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-2R4R-5X78-MVQF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-QW6Q-3PGR-5CWQ vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64433 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64433 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-46XP-26XH-HPQH vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-QW6Q-3PGR-5CWQ vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64324 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-2R4R-5X78-MVQF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64437 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

NightOwl

NightOwl Advanced Penetration Testing Framework A modula...

SUSE CVE-2026-27734

Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

SUSE CVE-2026-30247

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Import document via URL" feature is vulnerable to Server-Side Request Forgery SSRF through HTTP redirects. While the backend implements comprehensive UR...

PT-2026-28590

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A flaw exists in the Docker daemon’s privilege validation process during docker plugin install. The daemon does not fully enforce plugin privilege checks, potentially allowing unintended...

PT-2026-28593

Name of the Vulnerable Software and Affected Versions Moby/Docker Engine versions prior to 29.3.1 Description A security flaw in the Moby/Docker Engine allows attackers with local access to the Docker API or container to bypass authorization plugins AuthZ. By using specially crafted, oversized HT...

openSUSE Security Advisory (SUSE-SU-2026:0950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...