Important: Red Hat Security Advisory: OpenShift Container Platform 4.19 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.19. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

FRAGNESIA-Charan-cve-2026-46300

Charantej Architecture: Hardened Container Staging & Syscall Telemetry Lab An enterprise-grade, defense-in-depth container containment and runtime security telemetry framework. Designed from the perspective of a Cisco Lead Cybersecurity Architect, the Charantej Architecture isolates staging...

CVE-2026-31431

CVE-2026-31431 Estructura . ├── container │ ├── container.md Enfoque para el escape de contenedores │ ├── expenv Entorno del contenedor │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CopyFail

Local Privilege Escalation / Container Escape CVE-2026-31431 Usage: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Affected Versions: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba Cloud...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

OwnCloud-CVE-2023-49103

To build the container do: 1: Down the folder, unzip and build the container. 2: docker build -t cve-2023-49103 ./ 3: docker run --name cve-2023-49103 -p 80:80 -p 443:443 cve-2023-49103...

container-escape-ebpf

White Paper https://www.scs-europe.net/dlib/2026/2026-0321.html Assumptions Host runs vulnerable version of runc: For CVE-2025-31133: 1.2.7 and below, 1.3.0-rc.1 through 1.3.2, 1.4.0-rc.1 and 1.4.0-rc.2. For CVE-2024-21626: 1.0.0-rc93 through 1.1.11. Unprivileged user is able to create containers...

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

[SECURITY] Fedora 45 Update: cri-o1.36-1.36.6-1.fc45

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2026-63688: Missing Authentication for Critical Function

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

PT-2026-107171

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

PT-2026-106763

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61421: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-106764

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...