AZL-87720 CVE-2026-39827 affecting package docker-compose for versions less than 2.27.0-12

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...

AZL-87636 CVE-2026-39827 affecting package docker-buildx for versions less than 0.14.0-15

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...

Docker Desktop 安全漏洞

Docker Desktop is a desktop software by the American company Docker, based on container technology, designed for lightweight application deployment. This product provides a desktop environment that allows creating containers lightweight virtual machines on Linux/Windows/Mac OS systems, as well as...

PT-2026-42831

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The MLX inference backend uses the MLX-LM library, which imports and executes arbitrary Python files from model directories via the model file configuration field in the...

CVE-2026-5817: Inclusion of Functionality from Untrusted Control Sphere

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trustremotecode=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.frompretrained to import and execute arbitrary Python files included in any model pulled fr...

Docker Desktop < 4.71.0 Container Escape (CVE-2026-5843)

The version of Docker Desktop installed on the remote host is prior to 4.71.0. It is, therefore, affected by a container escape vulnerability: - A container-to-host code execution vulnerability exists in the Docker Model Runner MLX inference backend. An attacker with access to a container could...

Docker Model Runner 安全漏洞

Docker Model Runner is an open-source Docker model runner developed by Docker. There is a security vulnerability in Docker Model Runner MLX. This vulnerability stems from the unconditional import and execution of any Python file in the model directory. It may allow malicious models to be pulled...

Docker Model Runner 安全漏洞

Docker Model Runner is an open-source Docker model runner developed by Docker. Docker Model Runner vllm-metal contains a security vulnerability. This vulnerability arises from setting trustremotecode=True without any sandbox protection. It may allow arbitrary Python files to be executed during...

PT-2026-42830

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The vllm-metal inference backend unconditionally sets trust remote code=True when loading model tokenizers and operates without sandboxing. This allows the...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0855

Updates of 'rubygem-addressable', 'libvirt', 'libxml2', 'containerd', 'glib', 'glibc', 'docker', 'go', 'python3-idna', 'gtk3' packages of Photon OS have been released...

Docker Desktop < 4.68.0 Container Escape (CVE-2026-5817)

The version of Docker Desktop installed on the remote host is prior to 4.68.0. It is, therefore, affected by a container escape vulnerability: - A container-to-host code execution vulnerability exists in the Docker Model Runner vllm-metal inference backend. An attacker with access to a container...

CVE-2026-6406: Incorrect Authorization

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

CVE-2026-5843: Inclusion of Functionality from Untrusted Control Sphere

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the modelfile configuration field in config.json. When a model's config.json specifies a modelfile pointing to a Python...

MAL-2026-4228 Malicious code in @tiledesk/tiledesk-server (npm)

@tiledesk/tiledesk-server version 2.18.12 is a compromised release of the legitimate Tiledesk customer support platform package. This version was injected with a CI pipeline backdoor as part of the megalodon campaign — a mass GitHub repository backdooring operation targeting CI/CD runner...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: airflow, py3-pip, kserve, jupyter-base-notebook, httpie, kubeflow-jupyter-web-app, confluent-docker-utils, datadog-agent, kubeflow-katib, kubeflow-pipelines, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, reflex, open-webui, semgrep, mlflow,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: airflow, py3-pip, kserve, jupyter-base-notebook, httpie, kubeflow-jupyter-web-app, confluent-docker-utils, datadog-agent, kubeflow-katib, kubeflow-pipelines, dask-kubernetes, kubeflow-pipelines-visualization-server, superset, reflex, open-webui, semgrep, mlflow,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: metaflow-service, dbt-snowflake, py3-pip, airflow, apache-beam-python-3.11-sdk, localstack, authentik-fips, azure-functions-host, wazuh-manager, kubeflow-volumes-web-app, openstack-kolla-toolbox-2025.2-fips, nvidia-nsight-compute-13.3, py3-hashin, mlflow,...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: metaflow-service, dbt-snowflake, py3-pip, airflow, apache-beam-python-3.11-sdk, localstack, authentik-fips, azure-functions-host, wazuh-manager, kubeflow-volumes-web-app, openstack-kolla-toolbox-2025.2-fips, nvidia-nsight-compute-13.3, py3-hashin, mlflow,...

ai-pentest-lab

AI Pentest Lab Demo de segurança ofensiva com IA para palestr...

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: Basesystem Module 15-S...