AZL-75413 CVE-2025-11065 affecting package docker-cli 25.0.7-1

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

[SECURITY] Fedora 41 Update: docker-buildx-0.30.1-1.fc41

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 42 Update: docker-buildx-0.30.1-1.fc42

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildx-0.30.1-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 41 Update: docker-buildx-0.29.1-1.fc41

Docker CLI plugin for extended build capabilities with BuildKit...

EUVD-2021-2512

Malware in sbrugna...

EUVD-2024-2000

Malicious code in bioql PyPI...

EUVD-2023-24414

Malicious code in bioql PyPI...

EUVD-2025-20270

Malicious code in bioql PyPI...

[SECURITY] Fedora 42 Update: podman-5.6.1-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

[SECURITY] Fedora 41 Update: docker-buildx-0.27.0-1.fc41

Docker CLI plugin for extended build capabilities with BuildKit...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gatus, ini-file, sbom-convert, src, kubewatch, opensearch-k8s-operator, petname, wavefront-collector-for-kubernetes, witness, logstash-exporter, mc, consul-fips, flux-image-reflector-controller, terraform-provider-sendgrid, vgpu-util, request-1279-14, gitea-fips,...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: docker-compose, spire-server, osv-scanner, grype, falcoctl, opentelemetry-collector, splunk-otel-collector, dagger, zot, tw, docker-cli-buildx, apko, openfga, buf, melange, zarf, trivy, kargo, buildkitd, goreleaser, wolfictl, k9s, syft, buildah, nerdctl,...

CVE-2025-53376

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

PT-2025-28204 · Dokploy · Dokploy

Name of the Vulnerable Software and Affected Versions: Dokploy versions prior to 0.23.7 Description: Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS comman...

ROS-20250515-04

The vulnerability of the docker CLI plugin that extends Buildx build capabilities is related to the fact that the software stores sensitive information in log files. software stores sensitive information in log files. Exploiting the vulnerability could allow an attacker to gain access to sensitiv...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker-compose, kots, osv-scanner, grype, flux-helm-controller, chartmuseum, dagger, docker, zot, rancher-fleet, kaniko, docker-cli-buildx, opa-envoy, cilium-cli, cert-manager-cmctl, eksctl, neuvector-scanner, skaffold, melange, newrelic-infrastructure-agent, zarf,...

CVE-2025-0495

Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in OpenTelemetry...