187 matches found
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...
CopyEscape-CVE-2026-17106
CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...
CLEANSTART-2026-FH32149 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: docker-compose, skaffold, kubescape-operator, chartmuseum, helm-set-status, nerdctl, kube-arangodb, kubevela, neuvector-scanner, rancher-agent, trivy, falco-no-driver, tigera-operator, gatekeeper, k9s, k8sgpt, trivy-operator, k3s, helm-operator, kubescape, buildkitd,...
Astra Linux – Vulnerability in docker.io
Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...
AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: docker-compose, scorecard, skaffold, kaniko, guac, zot, docker-cli-buildx, trivy-operator, kubescape, podman, conftest, buildah, trivy, osv-scanner...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: docker-compose, scorecard, skaffold, kaniko, guac, zot, docker-cli-buildx, trivy-operator, kubescape, podman, conftest, buildah, trivy, osv-scanner...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch, bento, crossplane-provider-aws-ec2, kubescape-operator, spire-server, opa-envoy, snyk-cli, crossplane-provider-azure-storage, vault-k8s, grafana-rollout-operator, terraform-provider-grafana, victoriametrics-cluster, falco-no-driver, migrate, hubbl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: docker-compose, crossplane-provider-aws-ec2, gitea, spire-server, pulumi, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, trivy, falco-no-driver, tw, kubernetes, opentofu, cilium-cli, go-discover, kubescape, hcloud, rancher,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, vexctl, kyverno-notation-aws, gitsign, kubescape, teleport, falcoctl, witness, policy-controller, tekton-chains, tkn, zarf, gh, ratify, zot, cosign, docker-cli-buildx,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, tflint, sigstore-scaffolding, trivy, vexctl, kyverno-notation-aws, crossplane, kyverno, gitsign, trivy-operator, kubescape, buildkitd, teleport, falcoctl, witness, slsa-verifier, docker, policy-controller, tekton-chains...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: chartmuseum, nri-redis, grafana-rollout-operator, rabbitmq-default-user-credential-updater, trivy, migrate, hubble, kyverno-notation-aws, opentofu, cilium-cli, kubecolor, nri-f5, nats-server-config-reloader, controller-gen, witness, yunikorn-k8shim, render-template,...
