88 matches found
CVE-2026-79754
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754 Nuclio: Kaniko build tempDir command injection
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754 Nuclio: Kaniko build tempDir command injection
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
CVE-2026-79754
Nuclio , a serverless framework for real-time events and data processing, is affected by a command injection in its Dashboard build pipeline. Between versions 1.6.19 and 1.17.1 , the spec.build.tempDir field is not sanitized before being used to construct a shell command. When the Kaniko containe...
EUVD-2026-70217
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, buildkitd, falcoctl, podman-fips, telegraf, docker-cli-buildx-fips, buildkitd-fips, podman, kaniko-fips, docker-fips, kubescape-server-fips, ctop-fips, kubescape, kubescape-server, openbao-fips, openbao, kaniko, falcoctl-fips, skaffold-fips, builda...
GO-2026-6256 vulnerabilities
Vulnerabilities for packages: skaffold, podman, guac, conftest, scorecard, zot, kubescape, trivy, kaniko...
GO-2026-6255 vulnerabilities
Vulnerabilities for packages: skaffold, podman, guac, conftest, scorecard, zot, kubescape, trivy, kaniko...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: buildkitd, buildah, falcoctl, docker-cli-buildx, openbao, podman, skaffold, kubescape, telegraf, kaniko...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: buildkitd, docker, cadvisor, zarf, grype, podman, trivy, syft, k3s, wolfictl, kubescape, k3d, kubernetes, k9s, nerdctl, zot, kaniko, ctop, newrelic-infrastructure-agent, runc, skopeo, skaffold, kots...
GO-2024-2493 vulnerabilities
Vulnerabilities for packages: guac, buildkitd, conftest-fips, docker, conftest, kubescape, skaffold, trivy, scorecard, zot, kaniko...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: guac, buildkitd, conftest-fips, docker, conftest, kubescape, skaffold, trivy, scorecard, zot, kaniko...
GO-2024-2492 vulnerabilities
Vulnerabilities for packages: guac, buildkitd, conftest-fips, docker, conftest, kubescape, skaffold, trivy, scorecard, zot, kaniko...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: guac, buildkitd, conftest-fips, docker, conftest, kubescape, skaffold, trivy, scorecard, zot, kaniko...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: runc, skopeo, zarf, grype, podman, zot, wolfictl, docker, skaffold, k9s, nerdctl, kots, trivy, kaniko, newrelic-infrastructure-agent, ctop, syft, k3s, kubescape, buildkitd, cadvisor, kubernetes, k3d...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: docker-compose, trivy-operator, osv-scanner, buildah, skaffold, docker-cli-buildx, podman, guac, conftest, scorecard, zot, kubescape, trivy, kaniko...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: helm-push, gitness, grype, zot, skaffold, k8sgpt, kots, fuse-overlayfs-snapshotter, kaniko, trivy, cilium-cli, ctop, newrelic-infrastructure-agent, helm, up, eksctl, melange, kubevela, flux-helm-controller, kubescape, buildkitd, k3d, flux-source-controller...