CVE-2026-53755 Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through...

SUSE-SU-2026:2579-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33997: Fixed privilege validation bypass during plugin bsc1265907. - CVE-2026-34040: Fixed Authz zero length regression bsc1265929...

CVE-2026-56274

Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrictions. An attacker with a Flowise account of any role, or API access with view/update permissions f...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, pact-broker-docker, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, beats, tigera-operator-fips, kube-arangodb, docker-compose-fips, containerd, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, tigera-operator-fips, kube-arangodb, docker-compose-fips, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter, neuvector-scanner-fips,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, tigera-operator-fips, kube-arangodb, docker-compose-fips, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter, neuvector-scanner-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, grype-fips, newrelic-infrastructure-agent, skaffold, headlamp-fips, tigera-operator-fips, kube-arangodb, docker-compose-fips, kgateway-fips, docker-compose, syft-fips, harvester, fuse-overlayfs-snapshotter, neuvector-scanner-fips,...