CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39821 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39821 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39832 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39832 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39829 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39829 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

Fedora 44 : docker-buildx (2026-7f8de90b74)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f8de90b74 advisory. - Update to release v0.34.0 - Resolves: rhbz2467576 - Resolves CVE-2026-39984: rhbz2458930 - Upstream new features and fixes Tenable has extracted the...

Fedora 43 : docker-buildx (2026-6d1dd77956)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d1dd77956 advisory. - Update to release v0.34.0 - Resolves: rhbz2467576 - Resolves CVE-2026-39984: rhbz2458930 - Upstream new features and fixes Tenable has extracted the...

Fedora 42 : docker-buildx (2026-95f37c21d5)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-95f37c21d5 advisory. - Update to release v0.34.0 - Resolves: rhbz2467576 - Resolves CVE-2026-39984: rhbz2458930 - Upstream new features and fixes Tenable has extracted the...

[SECURITY] Fedora 42 Update: docker-buildx-0.34.0-1.fc42

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildx-0.34.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 44 Update: docker-buildx-0.34.0-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, helm-push, k3s, opa, syft-fips, k9s, containerd, containerd-fips, osv-scanner, headlamp-fips, gatekeeper, k9s-fips, livekit-cli, gitlab-rails-ce, kargo, trivy, helm-set-status, k8ssandra-client, helm-mapkubeapis, headlamp, consul-k8s-fips,...

AZL-87639 CVE-2026-42502 affecting package docker-buildx for versions less than 0.14.0-15

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87615 CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87645 CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87606 CVE-2026-39821 affecting package docker-buildx for versions less than 0.14.0-13

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87654 CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87612 CVE-2026-25681 affecting package docker-buildx for versions less than 0.14.0-15

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87642 CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...