187 matches found
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC de CVE-2026-17106 Proof of Concept educativa de CopyEscape CVE-2026-17106, vulnerabilidad de carrera TOCTOU en docker cp que permite a un contenedor malicioso escribir archivos arbitrarios en el host Docker. Inspirada en el trabajo original de masasron , quien descubrio y documen...
CopyEscape-CVE-2026-17106
CopyEscape: Tomando Control de Hosts Docker con docker cp CVE-2026-17106 Este es el repositorio de prueba de concepto para la entrada de blog CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape permite que un contenedor malicioso en ejecución compita con el productor d...
CLEANSTART-2026-FH32149 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm-operator, headlamp, tigera-operator, docker-compose, trivy-operator, eksctl, rancher, wolfictl, zarf, kaniko, kube-arangodb, helm-set-status, neuvector-scanner, xeol, steampipe, nerdctl, helm-push, rancher-helm, skaffold, rancher-agen...
Astra Linux – Vulnerability in docker.io
Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...
AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: scorecard, conftest, skaffold, zot, podman, trivy, docker-compose, osv-scanner, buildah, guac, kubescape, trivy-operator, kaniko, docker-cli-buildx...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: scorecard, conftest, skaffold, zot, podman, trivy, docker-compose, osv-scanner, buildah, guac, kubescape, trivy-operator, kaniko, docker-cli-buildx...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, ctop, kubernetes-replicator, crossplane-provider-aws-kms, knative-serving, grafana-rollout-operator, kubeflow, temporal-ui-server, controller-gen, opa, crossplane-provider-aws-cloudformation, glab, grafana-operator, cluster-api,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, neuvector-sigstore-interface, flux-image-automation-controller, kine, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks, glab, fulcio, crossplane-provider-aws-route53, skaffold, atlantis, buildah, snyk-cli,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, aactl, docker-cli-buildx, teleport, kubescape, tflint, gh, zot, policy-controller, tekton-chains,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, docker-cli-buildx, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, docker, gh,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: delve, grafana-rollout-operator, ip-masq-agent, neuvector-sigstore-interface, nri-memcached, controller-gen, cerbos, spire-controller-manager, opa, falcoctl, yunikorn-k8shim, fulcio, gcsfuse, timescaledb-tune, azure-service-operator, swagger, cilium-cli,...
