Lucene search
+L

7 matches found

OSV
OSV
added 2026/09/02 4:39 p.m.4 views

CVE-2026-79755 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

8CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder