CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, tekton-pipelines-fips, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, tekton-pipelines-fips, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, tekton-pipelines-fips, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, tekton-pipelines-fips, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, upwind-agent, headlamp, k9s, crossplane, neuvector-scanner, tekton-pipelines-fips, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, upwind-agent, headlamp, k9s, crossplane, neuvector-scanner, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer, kgateway,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, upwind-agent, headlamp, k9s, crossplane, neuvector-scanner, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer, kgateway,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer, kgateway,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, linkerd2-fips, eksctl, kgateway-fips, zot, kubescape-operator, headlamp, k9s, crossplane, neuvector-scanner, helm-operator, xeol, kube-arangodb-fips, helm-mapkubeapis, xeol-fips, docker-cli-buildx-fips, spegel-fips, packer, kgateway,...

lab-keamanan-siber

Lab Keamanan Siber Web Security Testing Lab 🚀 Cara Menja...

CVE-2026-53755: Server-Side Request Forgery (SSRF)

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through...

CVE-2026-53754: Server-Side Request Forgery (SSRF)

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection validatewebhookurl / validateurldestination in deploy/docker/utils.py used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach...

docker-stable-24.0.9_ce-18.1 on GA media (moderate)

docker-stable-24.0.9ce-18.1 on GA media Announcement ID: openSUSE-SU-2026:11075-1 Rating: moderate Cross-References: CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-33814 CVE-2026-33997 CVE-2026-34040 CVE-2026-39821 CVE-2026-41567 CVSS scores: CVE-2026-33186 SUSE : 8.1...

PYSEC-2026-227

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index flashinfer.ai/whl/ using --extra-index-url, but the...

PYSEC-2026-227

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index flashinfer.ai/whl/ using --extra-index-url, but the...

CVE-2026-54232

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index flashinfer.ai/whl/ using --extra-index-url, but the...

CVE-2026-54232

vLLM prior to 0.22.1 is affected by a dependency confusion flaw in its Dockerfile. The vulnerability arises from installing flashinfer-jit-cache from a private index (flashinfer.ai/whl/) via --extra-index-url while the package name was not registered on PyPI and UV_INDEX_STRATEGY is set to unsafe...

CVE-2026-54232 vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index flashinfer.ai/whl/ using --extra-index-url, but the...

CVE-2026-54232 vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index flashinfer.ai/whl/ using --extra-index-url, but the...

GHSA-XJVP-4FHW-GC47 runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

Impact When setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and os.Symlink with a filepath.Join string which allow an image with /dev as a symlink to trick runc into deleting files called ptmx on the host or creating a hardcoded set of symlinks with specific names a...