CVE-2026-53755

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2026-33997: Fixed privilege validation bypass during plugin bsc1265907. CVE-2026-34040: Fixed Authz zero length regression bsc1265929. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2026:2579-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33997: Fixed privilege validation bypass during plugin bsc1265907. - CVE-2026-34040: Fixed Authz zero length regression bsc1265929...

CVE-2026-56274

Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrictions. An attacker with a Flowise account of any role, or API access with view/update permissions f...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, pact-broker-docker-fips, commercial-gitlab-rails-ee, pact-broker-docker, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, upwind-agent, helm, xeol, kubescape,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, upwind-agent, helm, xeol, kubescape,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, upwind-agent, helm, xeol, kubescape,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips, helm-push,...