187 matches found
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC de CVE-2026-17106 Proof of Concept educativa de CopyEscape CVE-2026-17106, vulnerabilidad de carrera TOCTOU en docker cp que permite a un contenedor malicioso escribir archivos arbitrarios en el host Docker. Inspirada en el trabajo original de masasron , quien descubrio y documen...
CopyEscape-CVE-2026-17106
CopyEscape: Tomando Control de Hosts Docker con docker cp CVE-2026-17106 Este es el repositorio de prueba de concepto para la entrada de blog CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape permite que un contenedor malicioso en ejecución compita con el productor d...
CLEANSTART-2026-FH32149 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: helm-push, neuvector-scanner, tigera-operator, wolfictl, rancher, spegel, dagger, skaffold, headlamp, scorecard, steampipe, grype, zot, helm-set-status, k8sgpt, gatekeeper, trivy-operator, docker-cli-buildx, k9s, nerdctl, manifest-tool, k3s, kubevela, kargo,...
Astra Linux – Vulnerability in docker.io
Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...
AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: guac, osv-scanner, podman, zot, docker-compose, buildah, skaffold, docker-cli-buildx, trivy-operator, scorecard, kubescape, conftest, trivy, kaniko...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: guac, osv-scanner, podman, zot, docker-compose, buildah, skaffold, docker-cli-buildx, trivy-operator, scorecard, kubescape, conftest, trivy, kaniko...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: knative-eventing, neuvector-scanner, osv-scanner, omnibump, pulumi-language-java, spark-operator, actions-runner-controller, crossplane-provider-aws-sns, tigera-operator, vault-benchmark, docker-credential-acr-env, container-object-storage-interface,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: vault-benchmark, osv-scanner, pulumi-language-java, teleport, crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, go-discover, gitea, tkn, kubernetes, atlantis, k8sgpt, crossplane-provider-azure-managedidentity, tflint, k3s, step-issuer, melange,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: ko, teleport, skaffold, vexctl, kyverno-notation-aws, sigstore-scaffolding, gitsign, tkn, zot, spire-server, docker-cli-buildx, aactl, tflint, goreleaser, witness, cosign, gh, tekton-chains, policy-controller, falcoctl, zarf, neuvector-sigstore-interface, ratify,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: ko, teleport, skaffold, vexctl, kyverno-notation-aws, sigstore-scaffolding, slsa-verifier, gitsign, tkn, zot, spire-server, trivy-operator, docker-cli-buildx, aactl, tflint, crossplane, goreleaser, kyverno, buildkitd, witness, cosign, gh, trivy, tekton-chains,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...
