GO-2026-5746 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nerdctl, portieris, nuclei, trivy, kots, trivy-operator, spire-server, ko, opentelemetry-operator, buildah, skopeo, k8sgpt, rancher-agent, undock, rancher-machine, rancher, podman, amazon-cloudwatch-agent-operator, zot, docker-credential-gcr, grafana,...

GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...