GO-2026-5746 vulnerabilities

Vulnerabilities for packages: portieris, rancher-agent, aws-otel-collector, datadog-agent, nerdctl, ko, kpt, grafana, envoy-gateway, docker-credential-gcr, trivy, amazon-cloudwatch-agent-operator, kots, cri-tools, opentelemetry-operator, buildah, undock, rancher-machine, zot, podman, skopeo,...

GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...