GHSA-VP62-88P7-QQF5 Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Summary A race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This advisory covers the race during mountpoint creation. The related race during the subsequent mount syscall is tracked in...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: victoriametrics, dkron, flux-helm-controller, pluto, gh, fluxcd-kustomize-mutating-webhook, hubble, ingress-nginx-controller, nodetaint, metacontroller, tailscale, clickhouse-operator, nfs-subdir-external-provisioner, actions-runner-controller, nova,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: dataplaneapi-fips, pgwatch, k8s-metacollector-fips, pluto-fips, flux-image-reflector-controller, dapr-fips, kyverno-policy-reporter-plugins-kyverno-fips, omni-fips, karma-fips, flux-image-automation-controller, smarter-device-manager, nova, flux-source-controller-fip...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dataplaneapi-fips, pgwatch, k8s-metacollector-fips, pluto-fips, flux-image-reflector-controller, dapr-fips, kyverno-policy-reporter-plugins-kyverno-fips, omni-fips, karma-fips, flux-image-automation-controller, smarter-device-manager, nova, flux-source-controller-fip...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azure-ipam, grafana-pyroscope, migrate, snyk-cli, kaf, secrets-store-csi-driver-provider-azure, prometheus-blackbox-exporter, terraform-provider-google, q, whereabouts, nri-cassandra, kube-rbac-proxy, azurefile-csi, smokescreen, nri-jmx, spark-operator, tempo,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: azure-ipam, grafana-pyroscope, migrate, snyk-cli, kaf, secrets-store-csi-driver-provider-azure, prometheus-blackbox-exporter, terraform-provider-google, q, whereabouts, nri-cassandra, kube-rbac-proxy, azurefile-csi, smokescreen, nri-jmx, spark-operator, tempo,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, minc-fips, pgwatch, jobset-fips, kube-logging-operator, kubernetes-ingress-defaultbackend-fips, apache-exporter, nri-mongodb, cluster-api-provider-vsphere, yunikorn-k8shim, json-exporter-fips, prometheus-stackdriver-exporter,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004304 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003900 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000409 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...

EUVD-2018-19453

Malware in sbrugna...

EUVD-2008-2924

Malware in sbrugna...

EUVD-2011-1830

Malware in sbrugna...

EUVD-2010-0327

Malware in sbrugna...

EUVD-2011-1829

Malware in sbrugna...

EUVD-2020-4430

Malware in sbrugna...

EUVD-2022-1242

Malicious code in bioql PyPI...

EUVD-2022-31589

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-7738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandle...