GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cerbos, net-kourier-fips, ocm-cli, elastic-agent, gatekeeper, cloud-provider-azure, cilium-cli, eks-distro, azurefile-csi-fips, caddy, prometheus-operator-fips, kyverno-policy-reporter-plugins-kyverno, authentik, mattermost-fips, loki,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: glab, pulumi-language-dotnet, grafana-alloy, kubernetes, kubeflow-katib, k3s, azuredisk-csi, helm, loki, karpenter, src, zarf, docker-cli-buildx, mattermost, kine, telegraf, fuse-overlayfs-snapshotter, cerbos, docker, cilium-cli, istio, kube-fluentd-operator,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: rancher-agent, gatekeeper, cilium-cli, commercial-expanso-edge, mattermost-fips, loki, gitlab-rails-ce, traefik-fips, zitadel, knative-kafka-broker, podman, argo-workflows, containerd, fscrypt, prometheus-fips, docker-cli-buildx-fips, nemo, omnictl-multiarch, istio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nfpm, dagger, sops, k3s, falcoctl, loki, openbao, docker-cli-buildx, skaffold, external-dns, terragrunt, docker, istio, tflint, pulumi, opentofu, knative-serving, flux-kustomize-controller, gatus, snyk-cli, nerdctl, steampipe, aactl, chezmoi, nuclei, kyverno,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kubernetes, k3s, kaf, helm, loki, podman, docker-cli-buildx, rancher, mattermost, kine, external-dns, telegraf, spire-server, opentelemetry-collector, cilium, cilium-cli, istio, cloud-provider-aws, cert-manager, knative-serving, prometheus, flux, fscrypt, kots,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx, google-osconfig-agent...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: k8sgpt, juicefs-csi-driver, velero, cri-tools, kubernetes, cluster-api, vcluster, k3s, cloudnative-pg, falcoctl, k8sgpt-operator, kubescape, aws-node-termination-handler, zarf, docker-cli-buildx, datadog-agent, rancher, skaffold, emissary, consul-k8s, kpt,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flannel, grafana-mimir, hubble-ui, kube-state-metrics, k3s, falcoctl, kyverno-policy-reporter-ui, kubernetes-dashboard-web, terraform-provider-random, cloud-provider-azure, go, openbao, golangci-lint, docker-cli-buildx, grafana-rollout-operator, trillian,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: regclient, gatekeeper, cilium-cli, seaweedfs-fips, nats, k9s-fips, oras, argo-workflows, helm-push, syncthing, pulumi-language-yaml, prometheus-podman-exporter, istio, prometheus-elasticsearch-exporter, bom, jsonnet-bundler, cert-manager, docker-cli-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: regclient, gatekeeper, cilium-cli, seaweedfs-fips, nats, k9s-fips, oras, argo-workflows, helm-push, syncthing, pulumi-language-yaml, prometheus-podman-exporter, istio, prometheus-elasticsearch-exporter, bom, jsonnet-bundler, cert-manager, docker-cli-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus-snmp-exporter, s5cmd, lazydocker, kubeflow, vale, flagger-fips, local-path-provisioner, terraform-provider-azuread-fips, docker-credential-gcr-fips, regclient, php-fpmexporter, gatekeeper, cilium-cli, k8s-metacollector-fips, kepler, omnibump,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-snmp-exporter, s5cmd, lazydocker, kubeflow, vale, flagger-fips, local-path-provisioner, terraform-provider-azuread-fips, docker-credential-gcr-fips, regclient, php-fpmexporter, gatekeeper, cilium-cli, k8s-metacollector-fips, kepler, omnibump,...