GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, podman, docker-fips, nerdctl, vexctl, mattermost-fips, pulumi, ocm-cli, cilium-envoy-fips, keda, cilium-fips, reports-server, melange, terraform, vault-fips, prometheus-operator-fips, buildah, ingress-nginx-controller-fips, cerbos, virt-operator,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pulumi, pulumi-language-dotnet, prometheus, dataplaneapi, vexctl, grafana-alloy, traefik, rekor, kubernetes, pulumi-language-yaml, kine, mattermost, buildkitd, timestamp-authority, kots, prometheus-operator, karpenter, zarf, flux, loki, buildah,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: podman, nerdctl, mattermost-fips, argo-cd, reports-server, terraform, buildah, kuma, rancher, vitess, kube-state-metrics, etcd, upwind-agent, podman-fips, nemo, prometheus-fips, gatekeeper-fips, zot, buildah-fips, kots, kyverno-fips, packer, cilium-cli, harbor,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-events, openbao, cloud-provider-aws, age, kubescape, sops, zot, pulumi-kubernetes-operator, chezmoi, rancher-machine, terraform-provider-azurerm, terraform-provider-tls, splunk-otel-collector, flux, nerdctl, go-discover, kargo, pulumi-language-java,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, prometheus, cloud-provider-aws, zot, kubernetes, kine, mattermost, kots, prometheus-operator, minio, flux, loki, buildah, knative-serving, kyverno, podman, nerdctl, external-dns, kaf, rancher, kubernetes-dashboard, aactl, cilium, gitlab-kas, cilium-cli,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: syft-fips, docker-fips, beats, neuvector, neuvector-scanner-fips, trivy-fips, spegel, xeol-fips, skaffold-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, chainctl-fips, rancher, buildkitd, cluster-api-helm-controller-fips, headlamp, chaos-mesh-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: syft-fips, docker-fips, neuvector, neuvector-scanner-fips, trivy-fips, spegel, xeol-fips, skaffold-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, chainctl-fips, rancher, buildkitd, cluster-api-helm-controller-fips, headlamp, chaos-mesh-fips, helm-operator-fips...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: consul-k8s, headlamp, infinispan-operator, teleport, kubescape, verticadb-operator, kwok, eksctl, linkerd2, kubernetes, velero, kots, cloudnative-pg, zarf, argo-workflows, kubevela, k9s, trivy, kiali, terraform-provider-kubernetes, argo-rollouts, k8ssandra-client,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: bank-vaults, argo-events, openbao, rclone, vexctl, cloud-provider-aws, zot, azure-service-operator, kubescape, newrelic-infrastructure-agent, falco-exporter, grafana-agent-operator, rancher-machine, bento, terraform-provider-tls, redpanda, splunk-otel-collector,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: podman, helm-diff-fips, trivy-fips, mailpit, amazon-ssm-agent, cilium-envoy-fips, gitlab-kas-fips, goreleaser, influxd, terraform, cloudbeat-fips, kuma, envconsul-fips, podman-fips, nats-server, cert-manager-cmctl, syncthing-fips, gatekeeper-fips, step-ca-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: podman, helm-diff-fips, trivy-fips, mailpit, amazon-ssm-agent, cilium-envoy-fips, gitlab-kas-fips, goreleaser, influxd, terraform, cloudbeat-fips, kuma, envconsul-fips, podman-fips, nats-server, cert-manager-cmctl, syncthing-fips, gatekeeper-fips, step-ca-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, podman, kubernetes-dashboard-fips, cert-manager-istio-csr-fips, authservice, helm-diff-fips, cert-manager-csi-driver, kube-logging-logging-operator, mig-parted-fips, terraform-provider-databricks, neuvector, trivy-fips, cert-exporter-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, podman, kubernetes-dashboard-fips, cert-manager-istio-csr-fips, authservice, helm-diff-fips, cert-manager-csi-driver, kube-logging-logging-operator, mig-parted-fips, terraform-provider-databricks, neuvector, trivy-fips, cert-exporter-fips,...