Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-146)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-146 advisory. The HTTP/2 server could refund connection-level flow control twice for the same data: Once when a...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3271)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3271 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-126)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-126 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASDOCKER-2026-149)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-149 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to...

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3180)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3180 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-142)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-142 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASDOCKER-2026-145)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-145 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside ...

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-121)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-121 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, gitlab-cng-fips, crossplane-provider-azure-security, ko, crossplane-provider-aws-backup-fips, commercial-kyverno, flux-kustomize-controller-fips, crossplane-provider-aws-datasync, crossplane-provider-aws-firehose-fips,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2026-099 (ALASNITRO-ENCLAVES-2026-099)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-099 advisory. Arithmetic over induction variables in loops were not correctly checked for underflow o...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2026-113 (ALASDOCKER-2026-113)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-113 advisory. Arithmetic over induction variables in loops were not correctly checked for underflow or overfl...

Medium: amazon-ecr-credential-helper

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

Medium: amazon-ecr-credential-helper

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2026-095 (ALASNITRO-ENCLAVES-2026-095)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-095 advisory. url.Parse insufficiently validated the host/authority component and accepted some inval...