PT-2026-105548

Summary act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML a...

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

SummaryThe dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

roundcube-cve-2025-49113

Install docker run --name ubuntu24 \ -p 9876:80 \ -v "$PWD/rcinstall.sh":/root/rcinstall.sh \ -it ubuntu:24.04 \ bash -c "chmod +x /root/rcinstall.sh && /root/rcinstall.sh && exec bash" POC Youtube Follow me @Linkdin Credit @ fearsoff-org...

CLEANSTART-2026-RR17110 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-SK27128 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps

Security vulnerability affects the docker-cli-buildx package. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps...

CLEANSTART-2026-ZT40995 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-FH32149 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-RR21163 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CLEANSTART-2026-KD34055 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the docker-cli-buildx package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CLEANSTART-2026-DK67034 Security fix for ghsa-xm5m-wgh2-rrg3 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU05502 Security fix for ghsa-hfvc-g4fc-pqhx applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG47490 Security fix for ghsa-w8rr-5gcm-pp58 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GU43642 Security fix for ghsa-pc3f-x583-g7j2 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZH52889 Security fix for ghsa-p77j-4mvh-x3m3 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HI94719 Security fix for ghsa-4vrq-3vrq-g6gg applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system

Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...

CLEANSTART-2026-TB67127 Security fix for ghsa-4c29-8rgm-jvjj applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...