CVE-2026-97054 vulnerabilities

Vulnerabilities for packages: http-echo, crossplane-provider-aws-memorydb, restic, govulncheck, kubernetes-csi-driver-hostpath, fulcio, kind, secrets-store-csi-driver-provider-aws, cloud-provider-gcp-cloud-controller-manager, crossplane-provider-family-aws, dapr, helm-mapkubeapis, mattermost,...

GHSA-RG98-F588-44XG vulnerabilities

Vulnerabilities for packages: http-echo, crossplane-provider-aws-memorydb, restic, govulncheck, kubernetes-csi-driver-hostpath, fulcio, kind, secrets-store-csi-driver-provider-aws, cloud-provider-gcp-cloud-controller-manager, crossplane-provider-family-aws, dapr, helm-mapkubeapis, mattermost,...

GO-2026-6859 vulnerabilities

Vulnerabilities for packages: http-echo, crossplane-provider-aws-memorydb, restic, govulncheck, kubernetes-csi-driver-hostpath, fulcio, kind, secrets-store-csi-driver-provider-aws, cloud-provider-gcp-cloud-controller-manager, crossplane-provider-family-aws, dapr, helm-mapkubeapis, mattermost,...

abstractshimmer

ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image bsc1268441...

SUSE-SU-2026:5201-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. - CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image...

CVE-2022-23648-POC

PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...

CVE-2024-21626

CVE-2024-21626 Exploit Working Directory docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Important is to put -w /proc/self/fd/8\ Access the host filesystem using cat ../../../../../../../../../etc/passwd inside the container Exploit Symlink 1. docker run --name...

pumba

Chaos testing tool for Docker, containerd, and Podman Quick Start · User Guide · Network Chaos · Deployment · Contributing Pumba is a chaos testing and network emulation tool for Docker, containerd, and Podman containers. Inspired by Netflix Chaos Monkey, Pumba brings chaos engineering to the...

TencentOS Server 4: containerd (TSSA-2026:1373)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1373 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

cve-2019-5736-reproducer

CVE-2019-5736 reproducer This allows you to confirm RunC-CVE-2019-5736 works on your KVM instance. Workflow overview Build the docker.io related packages vulerable to CVE-2019-5736 in this repo Launch an Ubuntu 18.04 KVM instance on LXD Install the vulnerable .deb packages in the VM Try the...

GO-2026-6865 vulnerabilities

Vulnerabilities for packages: osv-scanner, bom, datadog-operator, restic, vault-secrets-webhook, kubernetes-event-exporter, zarf, ferretdb, dapr, undock, gitlab-runner, kserve, mattermost, cadvisor, calico, knative-serving, aws-otel-collector, kpt, argocd-image-updater, atlantis, grafana-alloy,...

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: osv-scanner, bom, datadog-operator, restic, vault-secrets-webhook, kubernetes-event-exporter, zarf, ferretdb, dapr, undock, gitlab-runner, kserve, mattermost, cadvisor, calico, knative-serving, aws-otel-collector, kpt, argocd-image-updater, atlantis, grafana-alloy,...

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: osv-scanner, bom, datadog-operator, restic, vault-secrets-webhook, kubernetes-event-exporter, zarf, ferretdb, dapr, undock, gitlab-runner, kserve, mattermost, cadvisor, calico, knative-serving, aws-otel-collector, kpt, argocd-image-updater, atlantis, grafana-alloy,...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4394)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4471)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

CVE-2026-109358

A flaw was found in Edgeless Systems Contrast. The node installer creates the containerd configuration file with insecure, world-writable permissions, allowing any local user on the host to modify its contents. A local unprivileged attacker can exploit this flaw by modifying configuration...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

Photon OS 5.0: Containerd PHSA-2026-5.0-92-1025

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-53495 affecting package moby-containerd-cc for versions less than 1.7.7-19

CVE-2026-53495 affecting package moby-containerd-cc for versions less than 1.7.7-19. A patched version of the package is available...