Astra Linux – Vulnerability in docker.io

In Docker versions before 9.03.15 and 20.10.3, there is a vulnerability in which pulling an intentionally malformed Docker image manifest causes the dockerd daemon to crash. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing...

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and earlier, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during the docker cp mount setup allowed a malicious container to create empty files or directories at...

Astra Linux – Vulnerability in Docker-Registry

A flaw was discovered in the /v2/catalog endpoint located in the distribution/distribution directory. This endpoint accepts a parameter that controls the maximum number of records to be returned query string: n. This vulnerability allows a malicious user to submit an excessively large value for n...

Astra Linux – Vulnerability in docker.io

Moby is an open-source project created by Docker to enable software containerization. A bug was discovered in Moby Docker Engine where attempting to copy files using docker cp into a specially crafted container can result in changes to Unix file permissions for existing files in the host’s...

Astra Linux – Vulnerability in docker.io-app

Moby version 25.0.3 has a race condition vulnerability in the StreamFormatter package. This vulnerability can be exploited to trigger multiple concurrent write operations, leading to data corruption or application crashes...

Astra Linux – Vulnerability in docker.io

Moby is an open-source container framework developed by Docker Inc. It is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is vulnerable to cache poisoning if the image is built FROM scratch. Additionally, changes to certain instructions—especially HEALTHCHECK and ONBUILD—do not trigger cache...

PT-2026-91839

Summary The dashboard reads its authentication credentials from $ESPHOME USERNAME and $ESPHOME PASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator w...

OPENSUSE-SU-2026:11765-1 docker-29.7.2_ce-41.1 on GA media

These are all security issues fixed in the docker-29.7.2ce-41.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-50025

Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, grype-fips, neuvector, consul-k8s, k8ssandra-client, kube-mgmt, syft, skaffold, rancher-agent, kubescape, google-osconfig-agent, spegel-fips, tigera-operator-fips, kaniko, cloudbeat, docker-compose-fips, chartmuseum, kubevela-fips,...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, grype-fips, neuvector, consul-k8s, k8ssandra-client, kube-mgmt, syft, skaffold, rancher-agent, kubescape, google-osconfig-agent, spegel-fips, tigera-operator-fips, kaniko, cloudbeat, docker-compose-fips, chartmuseum, kubevela-fips,...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: manifest-tool, newrelic-infrastructure-agent, rancher-agent, xeol, helm-set-status, kaniko, syft, k9s, datadog-agent, steampipe, grype, tigera-operator, docker-cli-buildx, helm-mapkubeapis, nerdctl, buildkitd, kubevela, helm, eksctl, dagger, k8ssandra-client,...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: manifest-tool, newrelic-infrastructure-agent, rancher-agent, xeol, helm-set-status, kaniko, syft, k9s, datadog-agent, steampipe, grype, tigera-operator, docker-cli-buildx, helm-mapkubeapis, nerdctl, buildkitd, kubevela, helm, eksctl, dagger, k8ssandra-client,...

Open Redirect

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Open Redirect in the Docker registry pagination handling, which follows the URL given in an HTTP Link header while still attaching the registry credentials, without confining the follow to the original...

CVE-2026-88889

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...

CVE-2026-88885

Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. Attackers can inject shell metacharacters through malicious dependency names to execute arbitrary...

CVE-2026-88888

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

CVE-2026-88888

A flaw was found in Renovate. Attackers can exploit a command injection vulnerability in the Mix manager by injecting shell metacharacters through malicious package names when processing private dependencies with unescaped organization parameters. This allows for the execution of arbitrary comman...

CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped...