CVE-2026-58053: Improper Privilege Management

Gitea actrunner with the Docker backend through act 0.262.0 passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-op...

PT-2026-53085

Gitea act runner with the Docker backend through act 0.262.0 passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-o...

TLS1.2_Exploit-Scripts

Breaking TLS 1.2 — Penetration Testing Lab & Exploit Scripts...

[SECURITY] Fedora 44 Update: docker-buildx-0.35.0-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 44 Update: docker-buildkit-0.31.0-1.fc44

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 43 Update: docker-buildx-0.35.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildkit-0.31.0-1.fc43

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-2479)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-2438)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

CVE-2026-53576

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-53576 Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-53576 Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-53576

Kestra (OSS) before versions 1.0.45 and 1.3.21 is affected by an authentication bypass in the REST API filter. The code checks request.getPath().endsWith("/configs") instead of matching the exact endpoint, causing anonymous bypass to endpoints like /api/v1/{tenant}/flows/configs and /api/v1/{tena...

CVE-2026-53576 Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

EUVD-2026-39919

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API @Filter"/api/v1/" treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresse...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: teleport, kyverno-fips, falcoctl-fips, ko-fips, trivy-operator-fips, cloudbeat, policy-controller-fips, spire-server, docker-fips, tkn, aactl, ko, crossplane, crossplane-fips, goreleaser, chainctl-fips, kyverno, kubescape-server-fips, kyverno-notation-aws-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: teleport, kyverno-fips, falcoctl-fips, ko-fips, trivy-operator-fips, cloudbeat, policy-controller-fips, spire-server, docker-fips, tkn, aactl, ko, crossplane, crossplane-fips, goreleaser, chainctl-fips, kyverno, kubescape-server-fips, kyverno-notation-aws-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.4, zot, kyverno-fips, reports-server, flux-source-controller, drone, flux-image-automation-controller, fscrypt, kubernetes, kubernetes-fips, gatekeeper, vitess, kyverno, etcd-fips, harbor, prometheus-operator, keda-fips, falco-no-driver,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: gptscript, frankenphp-8.4, pulumi-language-yaml, zot, chezmoi, kyverno-fips, apko, reports-server, rootlesskit, guac, flux-source-controller, drone, act, flux-image-automation-controller, fscrypt, kubernetes, kubernetes-fips, gatekeeper, vitess, nuclei, chainctl,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: frankenphp-8.4, pulumi-language-yaml, databricks-cli-fips, crossplane-provider-aws-athena, crossplane-provider-family-aws-fips, kyverno-fips, apko, crossplane-provider-azure-alertsmanagement, crossplane-provider-aws-autoscaling-fips, guac, flux-source-controller,...