vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

kata-containers

Kata Containers ¡Bienvenido a Kata Containers! Este repositorio es el hogar del código de Kata Containers para las versiones 2.0 y posteriores. Si quieres aprender sobre Kata Containers, visita el sitio web principal de Kata Containers. Introducción Kata Containers es un proyecto y comunidad de...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Entorno de reproducción Nota: El entorno requiere soporte KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

CVE-2026-64676

A flaw was found in Kata Containers. When the mem-agent feature is enabled, an untrusted host can bypass authorization checks in the kata-agent's memory management. This allows the host to tamper with in-guest memory, leading to attacker-controlled availability and performance degradation of...

CVE-2026-100833

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

CVE-2026-100833

Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 are vulnerable to container image substitution due to a flawed runtime policy generation. A regression in a Kata Containers update introduced an allow_storage rule that accepts storage entries using the image_guest_pull driver without ...

EUVD-2026-87853

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

CVE-2026-100833 Contrast before 1.23.1 Image Substitution via Policy Generation

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

CVE-2026-100833 Contrast before 1.23.1 Image Substitution via Policy Generation

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

CVE-2026-100833: Improper Input Validation

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

CVE-2026-84304 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21

CVE-2026-84304 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21. A patched version of the package is available...

CVE-2026-84445 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21

CVE-2026-84445 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21. A patched version of the package is available...

CVE-2026-84445 affecting package kata-containers for versions less than 3.32.0.kata0-6

CVE-2026-84445 affecting package kata-containers for versions less than 3.32.0.kata0-6. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package kata-containers for versions less than 3.32.0.kata0-6

CVE-2026-84304 affecting package kata-containers for versions less than 3.32.0.kata0-6. An upgraded version of the package is available that resolves this issue...

AZL-103460 CVE-2026-93601 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

AZL-103466 CVE-2026-93600 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

AZL-103469 CVE-2026-93599 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bitstringflags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so rawbits.len - 1 underflows on t...

AZL-103463 CVE-2026-93602 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...

AZL-103179 CVE-2026-81869 affecting package kata-containers-cc 3.15.0.aks0-21

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

kata-containers v4.2.0

Kata Containers Welcome to Kata Containers! This repository is the home of the Kata Containers code for the 2.0 and newer releases. If you want to learn about Kata Containers, visit the main Kata Containers website. Introduction Kata Containers is an open source project and community working to...