GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: calico-fips, cloud-sql-proxy, pinact, tekton-pipelines-fips, knative-eventing-fips, zitadel, eks-distro, ocm-kubernetes-controller-fips, kubernetes, grafana, k3s, cloud-provider-azure, buildkite-agent-fips, grafana-operator-fips, redka, prometheus,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, loki, istio, prometheus-operator, undock, vexctl, snyk-cli, cloud-sql-proxy, apko, kube-fluentd-operator, melange, k8s-device-plugin, grafana-operator, pulumi-language-dotnet, fuse-overlayfs-snapshotter, kots, redka, cilium, karpenter,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: calico-fips, tekton-pipelines-fips, knative-eventing-fips, rancher-agent, zitadel, kubernetes, nemo, k3s, frankenphp-8.5, prometheus, gitlab-workhorse-ce-fips, argo-workflows, knative-kafka-broker-fips, vitess, gitlab-rails-ce, backup-restore-operator, telegraf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitlab-runner, gptscript, apko, chezmoi, terraform-provider-tls, kots, step, cloud-provider-aws, kubescape, scorecard, tflint, argo-cd, cluster-api-azure-controller, docker, kine, act, atlantis, flux-kustomize-controller, gomplate,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: loki, spire-server, istio, prometheus-operator, snyk-cli, kots, cilium, kaf, knative-serving, kubernetes, cloud-provider-aws, argo-cd, flux, kine, buildah, aactl, teleport, minio, rancher-agent, nerdctl, vitess, docker-cli-buildx, fscrypt, k3s, prometheus, cilium-cli...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: helm-fips, grype-db, tekton-pipelines-fips, rancher-agent, kubescape-server-fips, teleport, trivy-fips, helm-operator, steampipe, k3s, kubescape-server, eksctl, syft-fips, chartmuseum, gitlab-rails-ce, spegel-fips, syft, gatekeeper, chainctl, containerd, chaos-mesh,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-fips, grype-db, rancher-agent, kubescape-server-fips, teleport, trivy-fips, helm-operator, steampipe, k3s, kubescape-server, eksctl, syft-fips, chartmuseum, gitlab-rails-ce, spegel-fips, syft, gatekeeper, chainctl, chaos-mesh, cg, trivy, trivy-operator,...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argocd-image-updater, istio, gitlab-runner, k8ssandra-client, kpt, postgres-operator, verticadb-operator, juicefs-csi-driver, kwok, kots, cilium, k8sgpt-operator, envoy-gateway, eksctl, cluster-api, kubernetes, redis-operator, k9s, kubescape,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, lazydocker, kubernetes-csi-node-driver-registrar, k8ssandra-client, cloud-sql-proxy, apko, kube-fluentd-operator, net-kourier, rclone, gitaly, secrets-store-csi-driver-provider-aws, docker-cli, terraform-provider-azapi, juicefs-csi-driver,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-fips, tofu-controller-fips, extism, kbld, knative-eventing-fips, ko-fips, rancher-agent, kubescape-server-fips, kubernetes, backup-restore-operator, gatekeeper, telegraf, flux-source-controller-fips, flux-operator, ingress-nginx-controller-fips, jsonnet-bundler,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-fips, tofu-controller-fips, extism, kbld, knative-eventing-fips, ko-fips, rancher-agent, kubescape-server-fips, kubernetes, backup-restore-operator, gatekeeper, telegraf, flux-source-controller-fips, flux-operator, ingress-nginx-controller-fips, jsonnet-bundler,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: helm-fips, chisel-fips, tofu-controller-fips, extism, cilium-certgen-fips, aws-ebs-csi-driver-fips, docker-machine-driver-linode, kbld, knative-eventing-fips, ko-fips, prometheus-redis-exporter, aws-efs-csi-driver, grafana-pyroscope,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: helm-fips, chisel-fips, tofu-controller-fips, extism, cilium-certgen-fips, aws-ebs-csi-driver-fips, docker-machine-driver-linode, apache-beam-python-3.13-sdk, kbld, knative-eventing-fips, ko-fips, aws-efs-csi-driver, grafana-pyroscope,...