CVE-2026-79754: Improper Neutralization of Special Elements used in a Command

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

CVE-2026-64777

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0...

CVE-2025-27612

A flaw was found in libcontainer. This vulnerability may allow elevation of capabilities via improper inheritance of capabilities in the tenant container when using the tenant builder. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...