86 matches found
PT-2026-80446
In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager-fips, argo-cd-fips, longhorn-manager, spark-operator-fips, kubernetes, harvester, vcluster, rke2-runtime-fips, azure-container-networking, longhorn-manager-fips, longhorn-share-manager, harvester-fips...
Malicious code in starlette-healthcheck (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d8da59826f5074d5b65d3b4733a4da6e7ce20167db9c14f7004e5fb7abe273 The package presents itself as an ASGI healthcheck/request-logging utility, but its advertised configurelogging helper exposed from the top-level...
MAL-2026-6724 Malicious code in starlette-healthcheck (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d8da59826f5074d5b65d3b4733a4da6e7ce20167db9c14f7004e5fb7abe273 The package presents itself as an ASGI healthcheck/request-logging utility, but its advertised configurelogging helper exposed from the top-level...
EUVD-2026-9888
Microsoft ACI Confidential Containers Information Disclosure Vulnerability...
EUVD-2026-9889
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability...
CVE-2026-26122
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-26124
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
Microsoft ACI Confidential Containers Information Disclosure Vulnerability
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
PT-2026-23572
Name of the Vulnerable Software and Affected Versions Microsoft ACI Confidential Containers affected versions not specified Description A privilege escalation issue exists in Microsoft Azure Confidential Computing containers. This allows for unauthorized access and control within the container...
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2025-65037
Improper control of generation of code 'code injection' in Azure Container Apps allows an unauthorized attacker to execute code over a network...
CVE-2025-65037
Improper control of generation of code 'code injection' in Azure Container Apps allows an unauthorized attacker to execute code over a network...
CVE-2025-65037 Azure Container Apps Remote Code Execution Vulnerability
...
CVE-2025-65037
CVE-2025-65037 affects Azure Container Apps. The root cause is improper control of code generation, enabling an attacker to perform remote code execution over the network via a code-injection vulnerability in the container platform. Impact is described as arbitrary code execution with high confid...