Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...

AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose, guac, buildah, conftest, docker-cli-buildx, kubescape, zot, skaffold, osv-scanner, scorecard, trivy, trivy-operator, podman...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose, guac, buildah, conftest, docker-cli-buildx, kubescape, zot, skaffold, osv-scanner, scorecard, trivy, trivy-operator, podman...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: hubble, migrate, mattermost, continuity, nri-haproxy, haproxy-ingress, goreleaser, omnibump, vault-k8s, octo-sts, grafana-alloy, spicedb-operator, prometheus, percona-server-mongodb-operator, crossplane-provider-aws-ec2, temporal-server, coredns, govulncheck,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitea, mattermost, wolfictl, cloudflared, gh, prometheus, crossplane-provider-aws-ec2, step-issuer, crossplane-provider-azure-storage, kaf, spire-server, rancher-agent, teleport, crossplane-provider-aws-dynamodb, atlantis, neuvector-sigstore-interface, kyverno, cosig...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: witness, goreleaser, vexctl, zot, gh, zarf, policy-controller, aactl, spire-server, gitsign, teleport, neuvector-sigstore-interface, falcoctl, kyverno-notation-aws, docker-cli-buildx, sigstore-scaffolding, cosign, ratify, tflint, tekton-chains, ko, tkn, kubescape,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: buildkitd, witness, docker, goreleaser, vexctl, zot, gh, slsa-verifier, zarf, policy-controller, aactl, spire-server, gitsign, teleport, neuvector-sigstore-interface, kyverno, falcoctl, kyverno-notation-aws, docker-cli-buildx, sigstore-scaffolding, cosign, ratify,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: hubble, migrate, kubernetes-csi-driver-nfs, nri-haproxy, grafana-alloy, regclient, prometheus, docker-credential-gcr, nri-redis, ip-masq-agent, mockgen, fzf, wire-go, gcsfuse, neuvector-sigstore-interface, spark-operator, render-template, yunikorn-k8shim,...

Exploit for CVE-2026-17106

CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...

AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: ocm-cli, kubernetes, kyverno-policy-reporter-plugins-kyverno-fips, falco-no-driver, cluster-api, harbor, authentik-fips, flux-fips, ocm-kubernetes-controller-fips, kubernetes-fips, cilium-envoy-fips, cloud-sql-proxy, prometheus-fips, art, undock, commercial-grafana,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: buildkitd, hubble, telegraf, grype, k3s, mattermost, pulumi, cerbos, docker, buildah, istio, pulumi-language-dotnet, caddy, vexctl, grafana-alloy, containerd, dataplaneapi, loki, prometheus, pulumi-language-yaml, fuse-overlayfs-snapshotter, karpenter, kubernetes,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: kubernetes, cilium, falco-no-driver, harbor, knative-kafka-broker, kubernetes-fips, kuma, prometheus-fips, tekton-pipelines, commercial-grafana, gatekeeper, flux, etcd, kube-conformance, knative-serving-fips, kube-arangodb-fips, kube-state-metrics,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitea, mattermost, wolfictl, gh, prometheus, step-issuer, crossplane-provider-azure-storage, kaf, spire-server, rancher-agent, teleport, atlantis, neuvector-sigstore-interface, kyverno, cosign, tflint, dagger, rancher, crossplane-provider-azure-sql, podman,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: telegraf, k3s, mattermost, buildah, istio, containerd, cilium, zot, loki, prometheus, kubernetes, kaf, cert-manager, external-dns, aactl, falco-no-driver, fscrypt, kots, minio, rancher-agent, cilium-cli, spire-server, flux, prometheus-operator, cloud-provider-aws,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: consul-k8s, helm-push, kubescape-operator-fips, newrelic-infrastructure-agent, dagger, docker-compose, manifest-tool, syft-fips, tekton-pipelines, kubescape-operator, gatekeeper, grype, crossplane-fips, redpanda-operator, kube-arangodb-fips, trivy-operator-fips,...