This Week in Spring - April 15th, 2025

Spring AI M7 is here! This new release includes a bunch of awesome new features! And some refactorings. Notably that the Spring AI auto-configuration has changed from a single monolithic artifact to individual auto-configuration artifacts per model, vector store, and other components. This change...

Dpanel 安全漏洞

Dpanel is a lightweight Docker visualization management panel open-sourced by Donknap that provides comprehensive container management features. A security vulnerability exists in Dpanel that stems from the inclusion of hardcoded JWT keys in the default configuration, which could lead to host...

Incomplete Patch Leaves NVIDIA and Docker Users at Risk

NVIDIA's incomplete security patch, combined with a Docker vulnerability, creates a serious threat for organizations using containerized environments. This article explains the risks and mitigation strategies...

Important: docker

Issue Overview: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or no...

Important: docker

Issue Overview: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or no...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

Exploit for Cross-site Scripting in Ourphp

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-...

OPENSUSE-SU-2025:14985-1 docker-27.5.1_ce-15.1 on GA media

These are all security issues fixed in the docker-27.5.1ce-15.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: direnv, flannel-cni-plugin, fscrypt, spire-controller-manager, snyk-cli, cni-plugins, ytt, cert-manager-istio-csr, grafana-agent-operator, fulcio, kaniko, secrets-store-csi-driver-provider-aws, openbao-k8s, aws-flb-firehose, authservice, dockerize, http-echo, glab,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: direnv, flannel-cni-plugin, fscrypt, spire-controller-manager, snyk-cli, cni-plugins, ytt, cert-manager-istio-csr, grafana-agent-operator, fulcio, kaniko, secrets-store-csi-driver-provider-aws, openbao-k8s, aws-flb-firehose, authservice, dockerize, http-echo, glab,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: crossplane, memcached-exporter-fips, nerdctl, flyte, esbuild-fips, licenseclassifier, nri-f5, spiffe-helper-fips, falco-exporter, wuzz, addon-resizer-fips, flux-notification-controller-fips, kube-fluentd-operator, vault-secrets-operator, flux-kustomize-controller-fip...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: crossplane, memcached-exporter-fips, nerdctl, flyte, esbuild-fips, licenseclassifier, nri-f5, spiffe-helper-fips, falco-exporter, wuzz, addon-resizer-fips, flux-notification-controller-fips, kube-fluentd-operator, vault-secrets-operator, flux-kustomize-controller-fip...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32755

CVE-2025-32755 affects Jenkins’ ssh-slave Docker images built on Debian. In these images, SSH host keys are generated at image creation, causing all containers derived from the same image version to share identical host keys. This enables an attacker who can position themselves in the network pat...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...