text4shell-policy

Demo di Text4Shell Questa demo mostra come usare Sigstore per convalidare i tuoi SBOM firmati rispetto alle policy text4shell in Kubernetes o da riga di comando Opzione 1: Verifica se la tua immagine OCI remota è interessata usando cue con cosign 2.0 root@kitploit: cosign verify-attestation...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...