AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, azure-aad-pod-identity-mic, podman, commercial-chainloop-backend, gatekeeper, frankenphp-8.2, karpenter, nerdctl, keda, atlantis-fips, ocm-cli-fips, prometheus, helmfile, pulumi-language-dotnet, nerdctl-fips, chainloop-cli, cilium-fips, docker,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: containerd, loki, vexctl, scorecard, pulumi-language-yaml, hubble, cilium-cli, grype, trino, kots, dataplaneapi, kubernetes, libnvidia-container, docker-cli-buildx, nerdctl, istio, karpenter, caddy, k3s, grafana-alloy, undock, snyk-cli, glab, melange, kyverno,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: podman, gatekeeper, frankenphp-8.2, nerdctl, frankenphp-8.5, packer, prometheus, opentelemetry-collector, docker-cli-buildx, gatekeeper-fips, rancher, containerd, knative-kafka-broker-fips, cert-manager, nemo, prometheus-elasticsearch-exporter, knative-serving-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: vault-benchmark, osv-scanner, pulumi-language-java, teleport, go-discover, gitea, tkn, kubernetes, atlantis, k8sgpt, crossplane-provider-azure-managedidentity, tflint, k3s, step-issuer, melange, rancher-agent, buildkitd, cosign, rootlesskit, external-secrets-operator...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, kaf, rancher, containerd, loki, cilium, cilium-cli, kots, minio, zot, kubernetes, spire-server, docker-cli-buildx, nerdctl, istio, aactl, k3s, opentelemetry-collector, snyk-cli, kyverno, helm, mattermost, kine, rancher-agent, cloud-provider-aws,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: gatekeeper, linkerd2, chaos-mesh-fips, packer, helmfile, kubescape-operator, chainctl, docker-cli-buildx, docker, wolfictl, rancher, containerd, crossplane, harvester-fips, kargo, skaffold-fips, buildkitd-fips, helm-exporter, spegel, docker-compose-fips, k9s,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: gatekeeper, linkerd2, chaos-mesh-fips, packer, helmfile, kubescape-operator, chainctl, docker-cli-buildx, docker, wolfictl, rancher, k8sgpt, crossplane, harvester-fips, kargo, skaffold-fips, buildkitd-fips, helm-exporter, spegel, docker-compose-fips, k9s,...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

AZL-87663 CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CVE-2026-6406: Incorrect Authorization

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-kas, terraform-provider-kubernetes, kpt, datadog-agent, rancher, cluster-api, teleport, skaffold, velero, headlamp, juicefs-csi-driver, cilium, dynamic-localpv-provisioner, cilium-cli, hubble, verticadb-operator, jitsucom-bulker, kots, cri-tools,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: keda, knative-eventing, contour, neuvector-scanner, osv-scanner, pulumi-language-java, vault-benchmark, go-discover, authservice, cri-tools, terraform-provider-aws, tkn, kubernetes, libnvidia-container, atlantis, terraform-provider-random, karpenter,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: conftest-fips, cloudflared-fips, docker-cli-buildx, cilium-envoy-fips, step-ca, nats, argo-cd-fips, kyverno-fips, kubernetes, terraform-fips, spegel, docker-compose-fips, oras, prometheus-podman-exporter-fips, gitlab-workhorse-ce-fips, cephcsi-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: conftest-fips, cloudflared-fips, docker-cli-buildx, cilium-envoy-fips, step-ca, nats, argo-cd-fips, kyverno-fips, kubernetes, terraform-fips, spegel, docker-compose-fips, oras, prometheus-podman-exporter-fips, gitlab-workhorse-ce-fips, cephcsi-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mongo-tools, kubectx, crossplane-function-environment-configs, eks-node-monitoring-agent, clickhouse-operator, nri-discovery-kubernetes, conftest-fips, pvc-autoresizer, terraform-provider-tls-fips, amazon-k8s-cni, db-operator, terraform-provider-azapi,...