9665 matches found
CLEANSTART-2026-RB07964 Security fixes in docker 29.3.0-r1
Package docker version 29.3.0-r1 fixes 21 vulnerabilities: ghsa-4c29-8rgm-jvjj, ghsa-4vrq-3vrq-g6gg, ghsa-78h2-9frx-2jm8, ghsa-w8rr-5gcm-pp58, ghsa-hfvc-g4fc-pqhx...
CLEANSTART-2026-DI23890 Security fixes in docker-fips 18.09.8-r0
Package docker-fips version 18.09.8-r0 fixes 1 vulnerabilities: CVE-2019-13509...
CVE-2026-47873
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
CVE-2026-47873 Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
EUVD-2026-50972
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
CVE-2026-47873
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...
CVE-2026-47873
The Boots Dashboard Docker integration in Spring Tools exposes container control ports on all host interfaces (0.0.0.0) instead of restricting to loopback, affecting Spring Tools for Eclipse (version 5.2.0 and earlier). The CVE-2026-47873 entry indicates a high-severity issue with CVSS 3.1: AV Ad...
PT-2026-66405
Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Description The Boot Dashboard Docker integration publishes container control ports on all host network interfaces 0.0.0.0 instead of restricting them to the loopback interface. This configurati...
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...
CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4
CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4. A patched version of the package is available...
CVE-2026-42306
A flaw was found in the Moby container framework. A race condition occurs during the docker cp mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-9M94-W2VQ-HCF9 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-7XGM-5PRM-V5GC vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64436 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64435 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-133 (ALASECS-2026-133)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-133 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...