GHSA-QVQC-4C52-X6QP regclient may leak authentication credentials to external blob stores

Credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs for foreign blobs. Example attack A malicious registry serves an OCI image...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the urls field in the layer descriptor. An attacker can obtain authentication credentials by serving a manifest with a urls entry pointing to an attacker-controlled host and causing the client to...

regclient may leak authentication credentials to external blob stores

Credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a malicious registry server, a malicious blob store, or a registry that does not restrict the external URLs for foreign blobs. Example attack A malicious registry serves an OCI image...

CVE-2026-57234

A flaw was found in Nokogiri, an XML and HTML library for Ruby. The NONET parse option, intended to prevent external resource fetching, was not correctly enforced in the JRuby implementation of Nokogiri::XML::Schema. This oversight could allow a specially crafted XML schema to fetch external...

EUVD-2026-39916

Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into automation execution parameters. A mass assignment vulnerability in externalTrigger allows an attacker to overwrite the interna...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: helm, flux, zarf-fips, tekton-pipelines, argo-cd-fips, rancher, kubernetes, skaffold-fips, trivy, kube-arangodb-fips, elastic-agent-fips, prometheus-fips, kots, gitea, cloudbeat, etcd, flux-source-controller-fips, vault, flux-source-controller, argo-workflows-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chezmoi, opentofu, step-kms-plugin, containerd, gomplate, mattermost, datadog-agent, terragrunt, cosign, opentelemetry-collector, witness, buildah, gatus, zarf, trivy-operator, snyk-cli, ko, kubescape, terraform-provider-azurerm, docker-machine-driver-harvester,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, fscrypt, telegraf, kaf, flux-source-controller, containerd, helm, mattermost, prometheus-operator, external-secrets-operator, opentelemetry-collector, aactl, kots, flux-image-automation-controller, prometheus, zarf, spire-server, trivy-operator, external-dns,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: chezmoi, opentofu, step-kms-plugin, containerd, gomplate, mattermost, terragrunt, opentelemetry-collector, witness, buildah, zarf, trivy-operator, snyk-cli, kubescape, docker-machine-driver-harvester, nerdctl, istio, rancher-agent, k3s, cilium-cli, act,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, fscrypt, telegraf, kaf, containerd, helm, mattermost, prometheus-operator, external-secrets-operator, opentelemetry-collector, buildah, podman, aactl, kots, prometheus, spire-server, external-dns, gitlab-kas, flux, zot, kubernetes, snyk-cli, docker-cli-buildx...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the rootfs symlink during image extraction. An attacker can gain unauthorized access to sensitive files and perform arbitrary file creation or modification on the host by importing a special...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the rootfs symlink during image extraction. An attacker can gain unauthorized access to sensitive files and perform arbitrary file creation or modification on the host by importing a special...