15507 matches found
RHEL 8 / 9 : OpenShift Container Platform 4.13.56 (RHSA-2025:2703)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2703 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
RHEL 8 / 9 : OpenShift Container Platform 4.14.49 (RHSA-2025:2712)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2712 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
youki (0.0.4) potentially affected by CVE-2025-27612 via libcontainer (0.0.4)
libcontainer CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcontainer and may be impacted: - youki 0.0.4 Source cves: CVE-2025-27612 Source advisory: OSV:GHSA-5W4J-F78P-4WH9...
GHSA-5W4J-F78P-4WH9 Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66
Impact In libcontainer, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. Code can be seen here . The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply s...
CVE-2025-27612
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...
CVE-2025-27612 Libcontainer is affected by capabilities elevation
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...
CVE-2025-27612 Libcontainer is affected by capabilities elevation
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...
CVE-2025-27612
CVE-2025-27612 is a youki/libcontainer issue where the tenant_builder incorrectly adds provided capabilities to the main container’s spec, potentially elevating capabilities in the tenant container. The vulnerability is in libcontainer prior to 0.5.3 and would affect users who directly use the te...
CVE-2025-27612 Libcontainer is affected by capabilities elevation
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...
youki 安全漏洞
youki is a youki open source implementation of the OCI runtime specification in Rust. A security vulnerability exists in versions of youki prior to 0.5.3 that stems from a tenant builder accepting a list of features to be added to the tenant container specification during the creation of a tenant...
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.contenttype and allows user-controlled filenames, leading to a path traversal vulnerability...
GHSA-FF5C-56M7-VC75 Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.contenttype and allows user-controlled filenames, leading to a path traversal vulnerability...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal enabling the deletion of files on the target server. An attacker can delete critical files such as polyaxon.sock to cause a crash of the API container. PoC python import requests url =...
RHSA-2025:2712 Red Hat Security Advisory: OpenShift Container Platform 4.14.49 packages and security update
Bulletin has no description...
RHSA-2025:2703 Red Hat Security Advisory: OpenShift Container Platform 4.13.56 packages and security update
Bulletin has no description...
CVE-2024-9363
CVE-2024-9363 describes an unauthorized file deletion vulnerability in the Polyaxon platform. The issue allows an attacker to delete files inside containers (e.g., polyaxon.sock), causing the API container to exit and potentially trigger a denial of service, without requiring authentication. It i...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.56 packages and security update
Red Hat OpenShift Container Platform release 4.13.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile
A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.56 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...