Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-108 (ALASDOCKER-2026-108)

"The version of docker installed on the remote host is prior to 25.0.14-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-108 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On...

CVE-2026-34237 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, camunda, nacos-docker, nacos...

CVE-2026-35568 vulnerabilities

Vulnerabilities for packages: nacos-docker, nacos...

GHSA-C459-2M73-67HJ vulnerabilities

Vulnerabilities for packages: nacos-docker, nacos...

GHSA-8JXR-PR72-R468 vulnerabilities

Vulnerabilities for packages: nacos-docker, nacos...

CVE-2024-46983 vulnerabilities

Vulnerabilities for packages: nacos-docker, nacos...

GHSA-HV2W-8MJJ-JW22 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, camunda, nacos-docker, nacos...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

Decepticon

⚡ Decepticon — Autonomous Multi-Agent Offensive Security !L...

blind-sqli-lab

🔬 Blind SQL Injection Lab — Time-Based PostgreSQL + FastAPI...

SUSE: Security Advisory (SUSE-SU-2026:20976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: docker

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

infosec-notebook

infosec-notebook Personal cybersecurity notes and references...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, oras, dfc, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, terraform-provider-azuread, chezmoi, nova, direnv, neuvector-dbgen, sbomqs,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: flux-source-controller, knative-eventing, slsa-verifier, dataplaneapi, migrate, kubernetes-csi-external-resizer, opencost, splunk-otel-collector, sriov-network-device-plugin, rook, helm-mapkubeapis, lvm-driver, k8ssandra-client, syft, kubernetes-dashboard, envconsul,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, knative-eventing, slsa-verifier, dataplaneapi, migrate, kubernetes-csi-external-resizer, opencost, splunk-otel-collector, sriov-network-device-plugin, rook, helm-mapkubeapis, lvm-driver, k8ssandra-client, syft, kubernetes-dashboard, envconsul,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: azure-aad-pod-identity-mic, kube-fluentd-operator, jsonnet-bundler, filebrowser, gitlab-operator-fips, etcd, rancher-helm, kubernetes-fips, net-kourier, beats, trivy-fips, witness, k8ssandra-client-fips, kubernetes-csi-node-driver-registrar, tofu-controller-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, databricks-cli-fips, azure-aad-pod-identity-mic, k8ssandra-operator-fips, kube-fluentd-operator, gatus, volume-modifier-for-k8s, prometheus-mysqld-exporter, mc-fips, spicedb-operator, filebrowser, gitlab-operator-fips, etcd,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: azure-aad-pod-identity-mic, kube-fluentd-operator, jsonnet-bundler, filebrowser, gitlab-operator-fips, etcd, rancher-helm, kubernetes-fips, net-kourier, beats, trivy-fips, witness, k8ssandra-client-fips, kubernetes-csi-node-driver-registrar, tofu-controller-fips,...