GO-2026-5746 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, kpt, nuclei, grafana-alloy, kots, trivy-operator, docker-credential-gcr, portieris, grafana, amazon-cloudwatch-agent, podman, opentelemetry-operator, rancher-machine, spire-server, datadog-agent, ko, zot, trivy, nerdctl, envoy-gateway, skopeo,...

GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...