melange

melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...

Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK What you get Podman, Docker an...

secfixes-tracker

Alpine Security Fix Tracker This is a Flask web application which tracks security fixes in Alpine. By using the Alpine secdb, we can generally deduce which CVEs have and have not been fixed. Some extensions to the secfixes reporting schema will be added to allow package maintainers to denote fals...

copyfail-alpine

This is a more minimal port of Copy Fail LPE CVE-2026-31431 which patches the first few bytes of /etc/passwd so that su-ing to root requires no password. This reduces the total size of the original exploit and makes it more portable. Distributions like Alpine use busybox/musl instead of a...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...

WSL_Payload_Builder

WSL Payload Builder Disclaimer This tool is intended for legitimate security research and penetration testing. Users are responsible for ensuring they have proper authorization before testing systems they do not own or have explicit permission to test. Overview A shell script for creating minimal...

ROOT-OS-ALPINE-323-CVE-2026-5121 CVE-2026-5121 in libarchive - Patched by Root

Root has patched CVE-2026-5121 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...

ALPINE-CVE-2026-76957

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...

CLEANSTART-2026-IU92725 Security fixes in prometheus-alertmanager 0.32.0-r0

Package prometheus-alertmanager version 0.32.0-r0 fixes 2 vulnerabilities: CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-SG48140 Security fixes in melange 0.56.1-r1

Package melange version 0.56.1-r1 fixes 22 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-54174, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-IL84688 Security fixes in cert-manager-webhook-pdns-fips 2.5.5-r1

Package cert-manager-webhook-pdns-fips version 2.5.5-r1 fixes 29 vulnerabilities: CVE-2026-39822, CVE-2026-42505, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

CLEANSTART-2026-EX26301 Security fixes in gitea 1.27.0-r0

Package gitea version 1.27.0-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

ROOT-OS-ALPINE-323-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-11824 CVE-2026-11824 in sqlite - Patched by Root

Root has patched CVE-2026-11824 in the sqlite package for Root:Alpine:3.23. Multiple fixed versions available...

ALPINE-CVE-2026-62433

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

ALPINE-CVE-2026-62431

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a DE fault...

ALPINE-CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...