Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.10 security and extras update

Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

OpenZFS Linux Authorization Bypass / Memory Corruption

OpenZFS on Linux contains multiple authorization and parser flaws that can allow low-privileged container users to access host-pool operations, corrupt cross-tenant storage, trigger kernel memory corruption and denial of service, and, under demonstrated research conditions, escalate to a host uid...

PT-2026-80446

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

Red Hat Security Advisory 2026-54580-03

Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...

Red Hat Security Advisory 2026-54599-03

Red Hat Security Advisory 2026-54599-03 - Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, information leakage, privilege escalation, and traversal vulnerabilities...

Red Hat Security Advisory 2026-54769-03

Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...

Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-138 (ALASDOCKER-2026-138)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-138 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extract...

PT-2026-77144

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the governance-policy-addon-controller component allows a user with permissions to annotate the namespaced ManagedClusterAddOn resource to...

Red Hat Security Advisory 2026-54581-03

Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...

ANT-2026-4YJK1P9J · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4YJK1P9J: Heap-buffer-overflow in dhav.c:286 While...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: prometheus, elastic-agent, virt-handler-fips, witness, hubble-ui, kubescape-operator, beats-fips, kubescape-server-fips, envoy-gateway, opentelemetry-ebpf-instrumentation-fips, docker-fips, nerdctl-fips, rke2-runtime, cosmo-router, elastic-agent-fips, delve,...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: prometheus, elastic-agent, virt-handler-fips, witness, hubble-ui, kubescape-operator, beats-fips, kubescape-server-fips, envoy-gateway, opentelemetry-ebpf-instrumentation-fips, docker-fips, nerdctl-fips, rke2-runtime, cosmo-router, elastic-agent-fips, delve,...

SUSE-SU-2026:23205-1 Security update for podman

This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container bsc1269471...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

yolobox v0.19.0

root@kitploit: ██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝...

ANT-2026-N6TD9MF6 · runc · Symlink-following

symlink-following medium CVE-2026-41579 GHSA-xjvp-4fhw-gc47 Severity Claude high · Security research firm high · Maintainer medium Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics...

Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-cont

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

Critical: Red Hat Security Advisory: Multicluster Global Hub 1.4.8 security update

Multicluster Global Hub v1.4.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2025-27771

In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...