CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

CVE-2022-30636

Technical details for CVE-2022-30636 are not provided in the connected documents. Public information in the initial description notes a limited impact on Windows path traversal, but no vendor/product/version specifics or remediation are given here. Monitor for updated advisories.

Privilege Escalation

github.com/coreos/ignition is vulnerable to Privilege Escalation. The vulnerability exists due to the main function of main.go does not properly set the ignition-apply and ignition-rmcfg parameters according to the filepath.base arguments, allowing an attacker to access unprivileged containers in...