AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno, buildkite-agent-fips, cluster-api, grype-fips, vault-secrets-operator-fips, calico-fips, cerbos, gitlab-rails-ce, argo-workflows-fips, prometheus-operator, argo-cd-fips, helm, libnvidia-container, rke2-runtime, cluster-api-fip...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, vexctl, telegraf, undock, kine, dataplaneapi, k8s-device-plugin, cerbos, timestamp-authority, argo-cd, kubernetes-dashboard, zarf, grafana-operator, glab, kube-fluentd-operator, nerdctl, pulumi-language-yaml, buildah, apko, snyk-cli, src,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: calico-fips, gitlab-rails-ce, argo-workflows-fips, prometheus-operator, argo-cd-fips, helm, cilium, knative-serving, kyverno-fips, opentofu, gitlab-kas, loki, buildah-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, podman-fips, kubernetes-fips, gatekeeper-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, flux-image-automation-controller, kine, falcoctl, glab, fulcio, skaffold, atlantis, buildah, snyk-cli, cilium-cli, rancher-machine, spire-server, aactl, terragrunt, teleport, caddy, helm, crossplane-provider-azure-authorization, tflint,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: telegraf, podman, kine, rancher, minio, kubernetes-dashboard, cloud-provider-aws, gitlab-kas, external-dns, nerdctl, rancher-agent, fscrypt, buildah, cilium, opentelemetry-collector, snyk-cli, kots, cilium-cli, kaf, spire-server, docker-cli-buildx, aactl, helm, flux,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, grype-fips, gitlab-rails-ce, amazon-ecs-agent-fips, scorecard, helm, chartmuseum-fips, cloudbeat-fips, spegel-fips, trivy, helm-fips, linkerd2-fips, kubescape, gitlab-rails-ce-fips, helm-exporter-fips, kaniko-fips, falco-no-driver, kots, manifest-too...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, grype-fips, gitlab-rails-ce, amazon-ecs-agent-fips, scorecard, helm, chartmuseum-fips, cloudbeat-fips, spegel-fips, trivy, helm-fips, linkerd2-fips, kubescape, gitlab-rails-ce-fips, helm-exporter-fips, kaniko-fips, falco-no-driver, kots, manifest-too...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

AZL-87663 CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CVE-2026-6406: Incorrect Authorization

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, gitlab-runner, rancher-fleet, headlamp, aws-node-termination-handler, eksctl, rancher, trivy-operator, sonobuoy, verticadb-operator, argo-cd, falcoctl, argo-rollouts, zarf, infinispan-operator, kwok, cluster-api, kube-arangodb, redis-operator,...

[SECURITY] Fedora 43 Update: podman-5.8.2-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, grafana-rollout-operator, temporal-ui-server, flux-image-automation-controller, gitness, kine, cerbos, spire-controller-manager, terraform-provider-random, falcoctl, verticadb-operator, vault-env, yunikorn-k8shim, gcsfuse,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: scorecard, cilium, kubernetes-csi-driver-nfs-fips, knative-serving, kyverno-fips, gitlab-kas, redka, consul, aws-flb-firehose, gatekeeper-fips, extism, opa-fips-envoy, nats, kots, kubernetes-dashboard, image-factory, kubernetes-csi-node-driver-registrar, mailpit,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: scorecard, cilium, kubernetes-csi-driver-nfs-fips, knative-serving, kyverno-fips, gitlab-kas, redka, consul, aws-flb-firehose, gatekeeper-fips, extism, opa-fips-envoy, nats, kots, kubernetes-dashboard, image-factory, kubernetes-csi-node-driver-registrar, mailpit,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, google-guest-agent-manager, scorecard, aws-fsx-csi-driver-fips, cilium, k6-operator, knative-serving, cert-manager-istio-csr-fips, kubernetes-csi-driver-nfs-fips, gitlab-kas, kyverno-fips, sftpgo-plugin-eventstore,...