RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

AZL-99195 CVE-2026-78662 affecting package docker-buildx 0.14.0-16

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99198 CVE-2026-56855 affecting package docker-buildx 0.14.0-16

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-98358 CVE-2026-37236 affecting package docker-buildx 0.14.0-16

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: osv-scanner, docker-cli-buildx, guac, trivy-operator, docker-compose, skaffold, trivy, scorecard, buildah, podman, kaniko, conftest, zot, kubescape...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: osv-scanner, docker-cli-buildx, guac, trivy-operator, docker-compose, skaffold, trivy, scorecard, buildah, podman, kaniko, conftest, zot, kubescape...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, fluent-bit-plugin-loki, govulncheck, kubeflow-katib, victoriametrics-cluster, kubescape-operator, nri-prometheus, cert-manager, k9s, kiali, node-problem-detector, sftpgo-plugin-geoipfilter, amazon-k8s-cni, continuity,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cloudflared, cert-manager, k9s, kubernetes-dashboard, hcloud, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, nfpm, docker-cli-buildx, minio, tw, fscrypt, crossplane-provider-azure-authorization, rootlesskit, terragrunt, argo-cd,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: gitsign, aactl, witness, sigstore-scaffolding, tekton-chains, kyverno-notation-aws, falcoctl, vexctl, docker-cli-buildx, policy-controller, kubescape, tflint, cosign, zarf, skaffold, ko, spire-server, gh, neuvector-sigstore-interface, goreleaser, zot, teleport,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: gitsign, aactl, docker, witness, sigstore-scaffolding, buildkitd, kyverno-notation-aws, falcoctl, tekton-chains, kyverno, docker-cli-buildx, vexctl, trivy, policy-controller, kubescape, tflint, cosign, zarf, skaffold, ko, spire-server, gh, slsa-verifier,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubecolor, kubeflow-katib, rancher-system-upgrade-controller, rancher-system-agent, rabbitmq-default-user-credential-updater, kubernetes-dashboard, kyverno-notation-aws, delve, docker-cli-buildx, gobump, cloud-provider-vsphere, terraform, cluster-api-provider-vsphere...

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...

Fedora 45 : docker-buildx (2026-c37317fdde)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...

AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kubernetes, containerd, kubeflow-katib, docker, cerbos, cert-manager, src, caddy, k3s, glab, buildah, kubernetes-dashboard, telegraf, hubble, grafana-alloy, falco-no-driver, buildkitd, libnvidia-container, trino, kyverno, docker-cli-buildx, flux, istio, vexctl,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, terraform-provider-aws, boring-registry, rancher-system-agent, kyverno-policy-reporter-ui, kubernetes-dashboard, delve, filebrowser, crossplane-provider-azure-authorization, argo-cd, supercronic, cloud-provider-azure, dapr, eksctl, kaniko,...

[SECURITY] Fedora 44 Update: docker-buildx-0.35.0-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildx-0.35.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-rails-ce, knative-serving, harbor-fips, tekton-pipelines, docker-cli-buildx, containerd, fscrypt, kots, helm, cilium, kube-arangodb-fips, nerdctl, vault-fips, rancher-agent, external-secrets-operator, prometheus-fips, aactl, frankenphp-8.4, kaf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cert-manager, k9s, kubernetes-dashboard, hcloud, nfpm, docker-cli-buildx, minio, fscrypt, crossplane-provider-azure-authorization, rootlesskit, terragrunt, argo-cd, flux-image-automation-controller, eksctl, gptscript, podman, policy-controller, chezmoi, steampipe,...