CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: argo-cd, vault-benchmark, rke2-runtime-fips, knative-operator, splunk-otel-collector, libnvidia-container, flux-source-watcher-fips, kine, argo-workflows, tekton-pipelines, kpt, azurefile-csi-fips, knative-operator-fips, extism, redka, snyk-cli,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: argo-cd, vault-benchmark, kyverno-policy-reporter-plugins-trivy, ucd, rke2-runtime-fips, knative-operator, splunk-otel-collector, libnvidia-container, kubescape-operator-fips, yunikorn-k8shim, cert-manager-google-cas-issuer-fips, cloud-sql-proxy-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: argo-cd, vault-benchmark, kyverno-policy-reporter-plugins-trivy, ucd, rke2-runtime-fips, knative-operator, splunk-otel-collector, libnvidia-container, kubescape-operator-fips, yunikorn-k8shim, cert-manager-google-cas-issuer-fips, cloud-sql-proxy-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: argo-cd, container-object-storage-interface, vault-benchmark, kubernetes-replicator-fips, kyverno-policy-reporter-plugins-trivy, ucd, rke2-runtime-fips, knative-operator, litmus-chaos-operator-fips, splunk-otel-collector, libnvidia-container, kubescape-operator-fips,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: libnvidia-container, yunikorn-k8shim, mockery, gitea, tekton-pipelines, kyverno-policy-reporter-plugins-trivy-fips, linkerd2, azurefile-csi-fips, extism, crossplane-provider-aws-backup-fips, flux-image-reflector-controller-fips, redka, dockerize-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: argo-cd, container-object-storage-interface, vault-benchmark, kubernetes-replicator-fips, kyverno-policy-reporter-plugins-trivy, ucd, rke2-runtime-fips, knative-operator, litmus-chaos-operator-fips, splunk-otel-collector, libnvidia-container, kubescape-operator-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: argo-cd, container-object-storage-interface, vault-benchmark, kubernetes-replicator-fips, kyverno-policy-reporter-plugins-trivy, ucd, rke2-runtime-fips, knative-operator, litmus-chaos-operator-fips, splunk-otel-collector, libnvidia-container, kubescape-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: libnvidia-container, yunikorn-k8shim, mockery, gitea, tekton-pipelines, kyverno-policy-reporter-plugins-trivy-fips, linkerd2, azurefile-csi-fips, extism, crossplane-provider-aws-backup-fips, flux-image-reflector-controller-fips, redka, dockerize-fips,...

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

Summary A path traversal vulnerability Zip Slip exists in the media archive import feature. An authenticated user with owner-level privileges can craft a malicious ZIP file with directory-traversal filenames to write arbitrary files outside the intended temporary extraction directory on the...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-launcher, virt-handler...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-launcher, virt-handler...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-launcher, virt-handler...

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

CVE-2026-40242: Server-Side Request Forgery (SSRF)

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...

PT-2026-32043

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 1.17.3 Description Arcane is an interface for managing Docker containers, images, networks, and volumes. The /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET...

arcane 代码问题漏洞

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.17.3 contained code vulnerabilities. These vulnerabilities stemmed from the /api/templates/fetch endpoint, which accepted URL parameters provided by callers and processed HTTP GET requests witho...

CVE-2026-39848 Dockyard's Unauthenticated Cron Endpoint in Dockyard Enables Container Enumeration and Database Manipulation

Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. A remote attacker can cause a logged-in administrator's browser to request /apps/action.php?action=stop&name= or...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, k8sgateway, k3s, dagdotdev, otel-cli, azure-service-operator, sftpgo-plugin-pubsub, aws-node-termination-handler, db-operator, go-discover, kube-state-metrics, certificate-transparency, cortex, grafana-mimir, containerd, tailscal...

CLEANSTART-2026-UQ00642 Docker CLI for Windows searches for plugin binaries in C:\\ProgramData\\Docker\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the minio-operator-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-YR07499 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...