crane-0.22.1-2.1 on GA media (moderate)

crane-0.22.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11960-1 Rating: moderate Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-63209 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:11960-1 crane-0.22.1-2.1 on GA media

These are all security issues fixed in the crane-0.22.1-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105669

These are all security issues fixed in the crane-0.22.1-2.1 package on the GA media of openSUSE Tumbleweed...

go-pillage-registries

go-pillage-registries Este proyecto toma un registro Docker y saquea el manifiesto y la configuración de cada imagen en su catálogo. Utiliza el paquete del comando crane de Google, que debería seguir la semántica de keychain de Docker. Si desea anular esto, simplemente cambie authn.DefaultKeychai...

CLEANSTART-2026-WJ82111 Security fix for ghsa-p436-gjf2-799p applied in: buildkitd 0.26.3-r1, crane 0.18.0-r1, crane 0.19.2-r0, crane 0.20.7-r1

ghsa-p436-gjf2-799p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AH15669 Security fix for ghsa-259r-337f-4rfw applied in: crane 0.19.2-r1, crane 0.20.7-r3, crane 0.20.7-r4

ghsa-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KG96538 Security fix for ghsa-jq35-85cj-fj4p applied in: crane 0.19.2-r0

Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IQ97259 Security fix for ghsa-4vq8-7jfc-9cvp applied in: crane 0.19.2-r0

Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KB70084 Moby is an open source container framework developed by Docker Inc

Security vulnerability affects the crane package. Moby is an open source container framework developed by Docker Inc...

CLEANSTART-2026-SP18128 Moby is an open-source project created by Docker to enable software containerization

Security vulnerability affects the crane package. Moby is an open-source project created by Docker to enable software containerization...

CLEANSTART-2026-PY60272 Security fix for ghsa-xw73-rw38-6vjc applied in: crane 0.19.2-r0

Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PX86725 Security fix for ghsa-v23v-6jw2-98fq applied in: crane 0.19.2-r0

Security vulnerability affects the crane package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OZ76094 Moby is an open-source project created by Docker for software containerization

Security vulnerability affects the crane package. Moby is an open-source project created by Docker for software containerization...

CLEANSTART-2026-PI24714 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

Security vulnerability affects the crane package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

CLEANSTART-2026-QU91464 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)

Security vulnerability affects the crane package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...

CLEANSTART-2026-HZ31792 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

Security vulnerability affects the crane package. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...

CLEANSTART-2026-TC24088 Security fix for ghsa-x744-4wpc-v9h2 applied in: crane 0.18.0-r1, crane 0.19.2-r0

ghsa-x744-4wpc-v9h2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AP95422 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

Security vulnerability affects the crane package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...

CLEANSTART-2026-PB65186 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the crane package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-VH11808 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

Security vulnerability affects the crane package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...