GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64435 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-71261 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-133 (ALASECS-2026-133)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-133 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...

CVE-2026-65618

CVE-2026-65618 describes an SSRF risk in JFrog Artifactory due to improper URL validation when handling certain URLs. The vulnerability could allow an attacker to cause unauthorized requests from Artifactory, potentially exposing internal services and cached response data. Affected component is A...

CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-48051

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...

log4jpwn

log4jpwn log4j rce test environment. See: This repository c...

pentest-confirm-mcp

pentest-confirm-mcp Model Context Protocol MCP server for...

[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

Spring Office Hours Podcast: S5E19 - Docker, Compose, Testcontainers, Oh My!

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun will discuss some of the new features around Docker, Testcontainers and the Spring Boot plugin. You can participate in our live stream to ask questions or catch the replay on your...

Important: docker

Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt ...

[SECURITY] Fedora 43 Update: moby-engine-29.6.2-1.fc43

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...

[SECURITY] Fedora 44 Update: moby-engine-29.6.2-1.fc44

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...

[SECURITY] Fedora 44 Update: skopeo-1.22.2-2.fc44

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

EUVD-2026-48434

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...