CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kubescape-server-fips, cloudbeat-fips, kaniko-fips, docker-cli-buildx, skaffold, skaffold-fips, kubescape-server, conftest, zot, kubescape, osv-scanner, docker-fips, docker-compose-fips, trivy, trivy-fips, podman-fips, buildah-fips,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, kubescape-server-fips, cloudbeat-fips, kaniko-fips, docker-cli-buildx, skaffold, skaffold-fips, kubescape-server, conftest, zot, kubescape, osv-scanner, docker-fips, docker-compose-fips, trivy, trivy-fips, podman-fips, buildah-fips,...

Important Photon OS Security Update - PHSA-2026-5.0-0785

Updates of 'docker-buildx', 'vim', 'curl' packages of Photon OS have been released...

CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-11065 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-11065 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28. A patched version of the package is available...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, helm, lazygit, crossplane-provider-aws-firehose, crossplane, flux-helm-controller, docker-cli-buildx, external-secrets-operator, pulumi-language-yaml, grype, crossplane-provider-aws-ec2, gitlab-runner,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, helm, lazygit, crossplane-provider-aws-firehose, crossplane, flux-helm-controller, docker-cli-buildx, external-secrets-operator, pulumi-language-yaml, grype, crossplane-provider-aws-ec2, gitlab-runner,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: datadog-agent, flux-fips, crossplane-provider-aws-ecr-fips, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-aws-ec2-fips, docker, crossplane-provider-aws-cloudwatchlogs, gomplate, datadog-agent-fips, skaffold-fips, gitlab-operator-fips,...

AZL-76931 CVE-2025-58190 affecting package docker-buildx 0.14.0-8

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-75410 CVE-2025-11065 affecting package docker-buildx 0.14.0-8

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75524 CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

openSUSE 16 Security Update : docker (openSUSE-SU-2026:20057-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20057-1 advisory. Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Updat...

Security update for docker (critical)

openSUSE security update: security update for docker ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20057-1 Rating: critical References: bsc1247367 bsc1247594 bsc1248373 bsc1250508 Cross-References: CVE-2025-54388 CVSS scores: CVE-2025-54388 SUSE :...

SUSE-SU-2026:20112-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

SUSE-SU-2026:20095-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

OPENSUSE-SU-2026:20057-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27. A patched version of the package is available...

AZL-71629 CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...