CLEANSTART-2026-KD34055 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the docker-cli-buildx package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CLEANSTART-2026-DK67034 Security fix for ghsa-xm5m-wgh2-rrg3 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU05502 Security fix for ghsa-hfvc-g4fc-pqhx applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG47490 Security fix for ghsa-w8rr-5gcm-pp58 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GU43642 Security fix for ghsa-pc3f-x583-g7j2 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZH52889 Security fix for ghsa-p77j-4mvh-x3m3 applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HI94719 Security fix for ghsa-4vrq-3vrq-g6gg applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system

Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...

CLEANSTART-2026-TB67127 Security fix for ghsa-4c29-8rgm-jvjj applied in: docker-cli-buildx 0.32.1-r0

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2024-OB04829 In net/http in Go before 1

Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...

CVE-2026-37236 affecting package cf-cli for versions less than 8.7.11-9

CVE-2026-37236 affecting package cf-cli for versions less than 8.7.11-9. A patched version of the package is available...

CVE-2026-56855 affecting package cf-cli for versions less than 8.7.11-9

CVE-2026-56855 affecting package cf-cli for versions less than 8.7.11-9. A patched version of the package is available...

CVE-2026-78662 affecting package cf-cli for versions less than 8.7.11-9

CVE-2026-78662 affecting package cf-cli for versions less than 8.7.11-9. A patched version of the package is available...

PT-2026-105101

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc (CENTOS7:CLSA-2025:1753780622)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1753780622 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen lack validation th...

AlmaLinux 9.6 [TuxCare] Security Update: wavpack / wavpack-devel (ALMALINUX9.6:CLSA-2026:1785754254)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785754254 advisory. - A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

Rocky Linux 10.1 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc (crlsa-2026_7383)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20267383 advisory. cockpit: ws: be more explicit when handling hostnames on cli CVE-2026-4631 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2022_8197)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228197 advisory. php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Tenable h...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (ALMALINUX9.2:CLSA-2025:1757946824)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757946824 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...