CVE-2026-100103: Use of Default Credentials

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

CVE-2026-105768: Numeric Truncation Error

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

PT-2026-106178

Name of the Vulnerable Software and Affected Versions Ghost versions 4.0.0 through 6.66.0 Description SVG images included in content imports are stored without sanitization. This allows an attacker to convince an Administrator to import a crafted file to host scripts on the site domain, which cou...

PT-2026-106237

Name of the Vulnerable Software and Affected Versions apko versions 0.2.0 through 1.4.4 Description The software allows users to build and publish OCI container images from apk packages. A flaw exists in the UserEntry.Parse and GroupEntry.Parse functions within pkg/passwd when reading UID and GID...

Exploit for Unrestricted Upload of File with Dangerous Type in Rconfig

CVE-2022-44384 Authenticated arbitrary file upload leading to...

grype v0.120.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.16-1.hum1 aarch64, x8664 python3.13-debug-3.13.16-1.hum1 aarch64, x8664 python3.13-devel-3.13.16-1.hum1 aarch64, x8664 python3.13-freethreading-3.13.16-1.hum1 aarch64,...

Command Injection

Overview @nx/docker is a The Nx Plugin for Docker to aid in containerizing projects. Affected versions of this package are vulnerable to Command Injection via the docker tag, docker push, and docker images calls in the release pipeline, where registry URL, repository name, version scheme,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: pcre2: pcre2-10.49-0.1.hum1 aarch64, x8664 pcre2-devel-10.49-0.1.hum1 aarch64, x8664 pcre2-static-10.49-0.1.hum1 aarch64, x8664 pcre2-syntax-10.49-0.1.hum1 noarch pcre2-tools-10.49-0.1.hum1...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: freetype: freetype-2.14.3-2.1.hum1 aarch64, x8664 freetype-demos-2.14.3-2.1.hum1 aarch64, x8664 freetype-devel-2.14.3-2.1.hum1 aarch64, x8664 freetype-2.14.3-2.1.hum1.src src Security Fixes:...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.7-0.1.hum1 aarch64, x8664 opentofu1.12-1.12.7-0.1.hum1.src src Security Fixes: opentofu1.12: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.15-1.hum1 aarch64, x8664 python3.12-debug-3.12.15-1.hum1 aarch64, x8664 python3.12-devel-3.12.15-1.hum1 aarch64, x8664 python3.12-idle-3.12.15-1.hum1 aarch64, x8664...

CVE-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.9.hum1 aarch64, x8664 grafana13.2-13.2.1-0.9.hum1.src src Security Fixes: grafana13.2: CVE-2026-101903...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.12-0.3.hum1 aarch64, x8664 grafana12.4-12.4.12-0.3.hum1.src src Security Fixes: grafana12.4: CVE-2026-101903 CVE-2026-93450...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.8-1.hum1 noarch python3-3.14.8-1.hum1 aarch64, x8664 python3-debug-3.14.8-1.hum1 aarch64, x8664 python3-devel-3.14.8-1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.6.hum1 aarch64, x8664 grafana13.1-13.1.6-0.6.hum1.src src Security Fixes: grafana13.1: CVE-2026-101903 CVE-2026-93981...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.22-1.hum1 aarch64, x8664 python3.10-debug-3.10.22-1.hum1 aarch64, x8664 python3.10-devel-3.10.22-1.hum1 aarch64, x8664 python3.10-idle-3.10.22-1.hum1 aarch64, x8664...