GO-2026-5746 vulnerabilities

Vulnerabilities for packages: zot, rancher, nerdctl, docker-credential-gcr, rancher-machine, spire-server, undock, podman, rancher-agent, portieris, kots, grafana, k8sgpt, trivy, aws-otel-collector, amazon-cloudwatch-agent-operator, skopeo, envoy-gateway, trivy-operator, nuclei, ko,...

GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...