CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: kubescape, trivy, osv-scanner, zot, guac, podman, skaffold, docker-compose, trivy-operator, kaniko, scorecard, buildah, conftest, docker-cli-buildx...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: kubescape, trivy, osv-scanner, zot, guac, podman, skaffold, docker-compose, trivy-operator, kaniko, scorecard, buildah, conftest, docker-cli-buildx...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: kubescape, trivy, osv-scanner, zot, guac, podman, skaffold, docker-compose, trivy-operator, kaniko, scorecard, buildah, conftest, docker-cli-buildx...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: kubescape, trivy, osv-scanner, zot, guac, podman, skaffold, docker-compose, trivy-operator, kaniko, scorecard, buildah, conftest, docker-cli-buildx...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: guac, osv-scanner, kubescape-server-fips, cloudbeat, scorecard, kaniko-fips, buildah, docker-cli-buildx, kaniko, podman-fips, skaffold, zot, kubescape-server, docker-fips, docker-compose-fips, cloudbeat-fips, trivy-operator, podman, docker-cli-buildx-fips, trivy,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: guac, osv-scanner, kubescape-server-fips, cloudbeat, scorecard, kaniko-fips, buildah, docker-cli-buildx, kaniko, podman-fips, skaffold, zot, kubescape-server, docker-fips, docker-compose-fips, cloudbeat-fips, trivy-operator, podman, docker-cli-buildx-fips, trivy,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: guac, osv-scanner, kubescape-server-fips, cloudbeat, scorecard, kaniko-fips, buildah, docker-cli-buildx, kaniko, podman-fips, skaffold, zot, kubescape-server, docker-fips, docker-compose-fips, cloudbeat-fips, trivy-operator, podman, docker-cli-buildx-fips, trivy,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: guac, osv-scanner, kubescape-server-fips, cloudbeat, scorecard, kaniko-fips, buildah, docker-cli-buildx, kaniko, podman-fips, skaffold, zot, kubescape-server, docker-fips, docker-compose-fips, cloudbeat-fips, trivy-operator, podman, docker-cli-buildx-fips, trivy,...

SUSE-SU-2026:20871-1 Security update for docker-compose

This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files bsc1252752...

PT-2026-41141

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.33.0 through 2.33.7 Portainer Community Edition versions 2.39.0 through 2.39.1 Portainer Community Edition versions prior to 2.41.0 Description Portainer supports deploying stacks from Git repositories...

Heimdall: Path received via Envoy gRPC corrupted when containing query string

Summary When using heimdall in envoy gRPC decision API mode, wrong encoding of the query URL string allows rules with non-wildcard path expressions to be bypassed. The HTTP based decision API is NOT affected, and proxy mode is NOT affected either. Note: The issue can only lead to unintended acces...

CVE-2025-58190 affecting package docker-compose for versions less than 2.27.0-8

CVE-2025-58190 affecting package docker-compose for versions less than 2.27.0-8. A patched version of the package is available...

CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8

CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8. A patched version of the package is available...

CVE-2025-11065 affecting package docker-compose for versions less than 2.27.0-8

CVE-2025-11065 affecting package docker-compose for versions less than 2.27.0-8. A patched version of the package is available...

SUSE-SU-2026:20656-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read bsc1254041. - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request...

GHSA-XXPW-32HF-Q8V9 AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

Summary The official docker-compose.yml publishes the memcached service on host port 11211 0.0.0.0:11211 with no authentication, while the Dockerfile configures PHP to store all user sessions in that memcached instance. An attacker who can reach port 11211 can read, modify, or flush session data ...

AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

Summary The official docker-compose.yml publishes the memcached service on host port 11211 0.0.0.0:11211 with no authentication, while the Dockerfile configures PHP to store all user sessions in that memcached instance. An attacker who can reach port 11211 can read, modify, or flush session data ...

PT-2026-23437

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 24.0 Description The AVideo application's official docker-compose.yml file publishes the memcached service on host port 11211 0.0.0.0:11211 without authentication. The Dockerfile configures PHP to store all user sessio...

CVE-2025-15558

Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries docker-compose.exe, docker-buildx.exe, etc. that are executed when a...

PT-2026-22939

Name of the Vulnerable Software and Affected Versions Docker CLI versions through 29.1.5 Docker Compose versions 2.31.0 through 5.0.0 Description The Docker CLI for Windows searches for plugin binaries in C:ProgramDataDockercli-plugins, a directory that does not exist by default. An attacker with...