PT-2026-66405

Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Description The Boot Dashboard Docker integration publishes container control ports on all host network interfaces 0.0.0.0 instead of restricting them to the loopback interface. This configurati...

CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4. A patched version of the package is available...

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...

CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the docker cp mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-71261 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-71261 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64435 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-133 (ALASECS-2026-133)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-133 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...

CVE-2026-65618

CVE-2026-65618 describes an SSRF risk in JFrog Artifactory due to improper URL validation when handling certain URLs. The vulnerability could allow an attacker to cause unauthorized requests from Artifactory, potentially exposing internal services and cached response data. Affected component is A...

CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-48051

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...

[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

Important: docker

Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt ...

Spring Office Hours Podcast: S5E19 - Docker, Compose, Testcontainers, Oh My!

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun will discuss some of the new features around Docker, Testcontainers and the Spring Boot plugin. You can participate in our live stream to ask questions or catch the replay on your...