CVE-2026-82838 Default webserver configuration with incorrect CSP

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section f...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:3818-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3818-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

CVE-2026-82838: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

Amazon Linux 2 : docker (ALASECS-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-134 advisory. The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an...

PT-2026-83718

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

OESA-2026-3526 docker security update

Docker is a product for you to build, ship and run any application as a lightweight container. Security Fixes: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory...

AZL-98358 CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

softsensor-docker-prototype

Corelight Software Sensor Docker Bundle प्रलेखन Overview इसमें क्या शामिल है Corelight Software Sensor Zeek Package Manager Corelight-update वैकल्पिक रूप से Installing Docker Debian या RHEL-आधारित सिस्टम पर Docker स्थापित करने के लिए एक स्क्रिप्ट दूसरे Corelight रिपॉजिटरी में शामिल है। स्क्रिप्ट ...

VulnCheck KEV: CVE-2026-66384

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions...

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions...

GO-2026-6253 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, openbao-fips, buildkitd-fips, skaffold, docker-fips, ctop-fips, skaffold-fips, docker-cli-buildx, kaniko, buildah, podman-fips, kubescape-server, buildah-fips, kubescape-server-fips, kaniko-fips, openbao, falcoctl, kubescape, podman, buildkitd...

flowsint v1.2.12

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

SUSE-SU-2026:3818-1 Security update for docker

This update for docker rebuilds it against the current go security release...

linux-privesc-lab

linux-privesc-lab Linux Privilege Escalation Vulnerability...

PT-2026-86436

This update for docker rebuilds it against the current go security release...

EUVD-2026-42717

@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint...

Exploit for OS Command Injection in Php

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab /...

CVE-2026-55581

mcp-shell is an MCP server for running shell commands securely. Prior to 0.6.0 , the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell -c flag. A caller of the shel...