pumba

Chaos testing tool for Docker, containerd, and Podman Quick Start · User Guide · Network Chaos · Deployment · Contributing Pumba is a chaos testing and network emulation tool for Docker, containerd, and Podman containers. Inspired by Netflix Chaos Monkey, Pumba brings chaos engineering to the...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: grype, k8sgpt, linkerd2, kubescape, prometheus-operator, db-operator, rke2-cloud-provider, fluent-operator, net-kourier, azure-service-operator, xeol, spark-operator, gh, spicedb, fulcio, docker-machine-driver-harvester, kubernetes-csi-external-resizer, weaviate,...

cve-2019-5736-reproducer

CVE-2019-5736 reproducer This allows you to confirm RunC-CVE-2019-5736 works on your KVM instance. Workflow overview Build the docker.io related packages vulerable to CVE-2019-5736 in this repo Launch an Ubuntu 18.04 KVM instance on LXD Install the vulnerable .deb packages in the VM Try the...

CVE-2022-23648-POC

PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17. A patched version of the package is available...

Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (crlsa-2023_6939)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20236939 advisory. go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handling...

CLEANSTART-2026-WQ27487 tar

Security vulnerability affects the containerd package. tar...

CLEANSTART-2026-DR35313 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Security vulnerability affects the containerd package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions...

CLEANSTART-2026-ZS14091 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

Security vulnerability affects the containerd package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...

CLEANSTART-2026-SV65560 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it

Security vulnerability affects the containerd package. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it...

CLEANSTART-2026-BW04566 RSA and DSA public key parsers did not enforce size limits on key parameters

Security vulnerability affects the containerd package. The RSA and DSA public key parsers did not enforce size limits on key parameters...

CLEANSTART-2026-AJ28533 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the containerd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2025-IG62048 Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0

Security vulnerability affects the containerd package. Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0...

CLEANSTART-2025-LA45180 runc through 1

Security vulnerability affects the containerd package. runc through 1...

CLEANSTART-2025-WZ56191 Go before 1

Security vulnerability affects the containerd package. Go before 1...

CLEANSTART-2025-NR50910 runc through 1

Security vulnerability affects the containerd package. runc through 1...

CLEANSTART-2025-DA74849 Moby is an open-source project created by Docker to enable and accelerate software containerization

Security vulnerability affects the containerd package. Moby is an open-source project created by Docker to enable and accelerate software containerization...

CLEANSTART-2025-UG08794 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

CLEANSTART-2025-PN33710 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

Important: runfinch-finch

Issue Overview: A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...