178601 matches found
Docker Desktop < 4.67.0 SSRF
The version of Docker Desktop is prior to 4.67.0. It is therefore affected by a server-side request forgery vulnerability. - Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registryâs...
PT-2026-29951
Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery SSRF in github.com/docker/model-runner...
Docker Desktop < 4.67.0 SSRF (CVE-2026-33990)
The version of Docker Desktop installed on the remote host is prior to 4.67.0. It is, therefore, affected by a server-side request forgery SSRF vulnerability: - Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows t...
GHSA-MGVC-8Q2H-5PGC vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-8HFC-FQ58-R658 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-22731 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-22733 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-22733 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...
GHSA-MGVC-8Q2H-5PGC vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...
GHSA-8HFC-FQ58-R658 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...
CVE-2026-22731 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...
CVE-2026-33990
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
UBUNTU-CVE-2026-33990
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
EUVD-2026-17963
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
CVE-2026-33990 Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
CVE-2026-33990
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
CVE-2026-33990 Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
CVE-2026-33990 Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...
CVE-2026-33990
Docker Model Runner (DMR) is affected by an SSRF in the OCI registry token exchange flow prior to version 1.1.25. When pulling a model, DMR uses the realm URL from the registry’s WWW-Authenticate header without validating the scheme, hostname, or IP range, allowing a malicious OCI registry to dir...
CLEANSTART-2026-TZ04509 Security fixes for CVE-2024-57699, CVE-2025-59250, CVE-2025-67735, CVE-2026-1002, ghsa-72hv-8253-57qq, ghsa-m494-w24q-6f7w applied in versions: 3.1.7-r6
Multiple security vulnerabilities affect the apicurio-registry package. These issues are resolved in later releases. See references for individual vulnerability details...