11 matches found
cloudlift (>=1.0.0, <=2.0.6), pytest-docker-py (>=1.1.0, <=1.1.3) +1 more potentially affected by CVE-2025-71176 via pytest (4.0.0)
pytest PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cloudlift =1.0.0, =1.1.0, =1.1.3 - pytest-mockservers 0.1.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...
cloudlift (>=1.0.0, <=2.0.6), pytest-docker-py (>=1.1.0, <=1.1.3) +1 more potentially affected by CVE-2025-71176 via pytest (4.0.0)
pytest PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cloudlift =1.0.0, =1.1.0, =1.1.3 - pytest-mockservers 0.1.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...
Man-in-the-Middle (MitM)
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
PYSEC-2014-80
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277
CVE-2014-5277 affects Docker before 1.3.1 and docker-py before 0.5.3, where fallbacks to HTTP occur if HTTPS to the registry fails. This enables man-in-the-middle downgrade attacks that can lead to exposure of authentication and image data when an attacker sits between the client and registry. Co...
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...
CVE-2014-5277: Undefined Security Weakness
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...