88 matches found
CVE-2026-79754
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754 Nuclio: Kaniko build tempDir command injection
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754 Nuclio: Kaniko build tempDir command injection
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754
Nuclio , a serverless framework for real-time events and data processing, is affected by a command injection in its Dashboard build pipeline. Between versions 1.6.19 and 1.17.1 , the spec.build.tempDir field is not sanitized before being used to construct a shell command. When the Kaniko containe...
EUVD-2026-70217
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: kaniko, openbao-fips, buildah-fips, falcoctl-fips, docker-cli-buildx, docker-fips, docker-cli-buildx-fips, buildkitd-fips, podman, falcoctl, kubescape-server, skaffold, kaniko-fips, kubescape, buildkitd, buildah, openbao, telegraf, skaffold-fips, ctop-fips,...
GO-2026-6256 vulnerabilities
Vulnerabilities for packages: trivy, scorecard, skaffold, podman, conftest, kubescape, guac, kaniko, zot...
GO-2026-6255 vulnerabilities
Vulnerabilities for packages: trivy, scorecard, skaffold, podman, conftest, kubescape, guac, kaniko, zot...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: falcoctl, openbao, buildkitd, skaffold, telegraf, podman, kubescape, kaniko, buildah, docker-cli-buildx...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: trivy, conftest, kaniko, zot, conftest-fips, docker, skaffold, kubescape, guac, buildkitd, scorecard...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kaniko, k9s, k3s, ctop, zot, grype, zarf, docker, nerdctl, cadvisor, podman, trivy, newrelic-infrastructure-agent, kubernetes, skaffold, wolfictl, kubescape, buildkitd, kots, k3d, syft, runc, skopeo...
GO-2024-2492 vulnerabilities
Vulnerabilities for packages: trivy, conftest, kaniko, zot, conftest-fips, docker, skaffold, kubescape, guac, buildkitd, scorecard...
GO-2024-2493 vulnerabilities
Vulnerabilities for packages: trivy, conftest, kaniko, zot, conftest-fips, docker, skaffold, kubescape, guac, buildkitd, scorecard...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: trivy, conftest, kaniko, zot, conftest-fips, docker, skaffold, kubescape, guac, buildkitd, scorecard...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: step, ksops, melange, osv-scanner, dex, kwok, minio, sigstore-scaffolding, hubble-ui, grafana-agent-operator, grpc-health-probe, dagger, terragrunt, zot, k3s, k3d, sops, spire-server, temporal, kube-rbac-proxy, opentelemetry-collector-contrib, k8sgpt,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: wolfictl, ctop, grype, zot, k3s, cadvisor, k3d, skopeo, runc, syft, k9s, newrelic-infrastructure-agent, kubescape, kots, kubernetes, trivy, docker, nerdctl, buildkitd, skaffold, zarf, podman, kaniko...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: trivy, scorecard, docker-compose, trivy-operator, osv-scanner, skaffold, zot, podman, conftest, kubescape, guac, kaniko, buildah, docker-cli-buildx...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: trivy, scorecard, docker, buildkitd, skaffold, conftest, kubescape, guac, kaniko, zot...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: eksctl, gitness, melange, ctop, fuse-overlayfs-snapshotter, grype, zot, flux-helm-controller, kubevela, helm-push, k3d, k8sgpt, helm, flux-source-controller, newrelic-infrastructure-agent, kubescape, kots, up, trivy, cilium-cli, buildkitd, skaffold, kaniko...