Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

92 matches found

Kitploit
Kitploit•added 2026/10/30 10:33 p.m.•23 views

kern

kern: rootless container runtime and sandbox with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers. A real, kernel-enforced container in a few milliseconds, out of one static binary with no daemon. MCP support for Claude Code, Cursor, Claude Desktop and LM...

6.3AI score
SaveExploits0References9
RedhatCVE
RedhatCVE•added 2026/10/19 5:35 p.m.•12 views

CVE-2026-47766

A flaw was found in crun, an OCI Container Runtime. When processing an OCI bundle where the container root filesystem's /dev directory is a symbolic link and /dev is not explicitly mounted, crun incorrectly follows this symlink outside the container's intended boundaries. This allows a local...

8.4CVSS6.1AI score0.00196EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE•added 2026/10/06 5:11 p.m.•9 views

SUSE CVE-2026-105768

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

6.3CVSS5.7AI score0.00301EPSS
SaveExploits0References3
NVD
NVD•added 2026/10/05 9:16 p.m.•60 views

CVE-2026-105768

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

6.3CVSS0.00301EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/10/05 8:17 p.m.•37 views

CVE-2026-105768 apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

6.3CVSS0.00301EPSS
SaveExploits0References4
EUVD
EUVD•added 2026/10/05 8:17 p.m.•19 views

EUVD-2026-92789

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

6.3CVSS5.7AI score0.00301EPSS
SaveExploits0References4
CVE
CVE•added 2026/10/05 8:17 p.m.•56 views

CVE-2026-105768

The apko tool, used to build OCI container images from apk packages, is vulnerable to a numeric truncation error (CWE-197) in versions 0.2.0 to before 1.4.5 . Specifically, the UserEntry.Parse and GroupEntry.Parse functions in pkg/passwd use strconv.Atoi to convert UID and GID fields to uint32 wi...

6.3CVSS5.7AI score0.00301EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/10/05 12:00 a.m.•16 views

PT-2026-106237

Name of the Vulnerable Software and Affected Versions apko versions 0.2.0 through 1.4.4 Description The software allows users to build and publish OCI container images from apk packages. A flaw exists in the UserEntry.Parse and GroupEntry.Parse functions within pkg/passwd when reading UID and GID...

6.3CVSS5.7AI score0.00301EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/10/05 12:00 a.m.•14 views

CVE-2026-105768: Numeric Truncation Error

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with strconv.Atoi and convert them to uint32 withou...

6.3CVSS5.7AI score0.00301EPSS
SaveExploits0References2
osv_rlsa
osv_rlsa•added 2026/09/04 6:08 p.m.•21 views

RLSA-2026:63332 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

8.8CVSS6.1AI score0.00798EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus•added 2026/09/04 12:00 a.m.•17 views

RHEL 10 : buildah (RHSA-2026:63332)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63332 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

8.8CVSS7.1AI score0.00798EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•12 views

PT-2026-90774

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern...

5.7AI score
SaveExploits0References6
UbuntuCve
UbuntuCve•added 2026/09/03 12:00 a.m.•25 views

CVE-2026-65109

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern...

5.7AI score
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/09/03 12:00 a.m.•30 views

UBUNTU-CVE-2026-65109

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern...

5.7AI score
SaveExploits0References3
osv_cve
osv_cve•added 2026/08/14 4:16 p.m.•28 views

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/14 12:00 a.m.•7 views

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.9AI score0.00196EPSS
SaveExploits0References2
Mend
Mend•added 2026/05/09 7:26 p.m.•13 views

CVE-2026-42575

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...

8.7CVSS8.2AI score0.00159EPSS
SaveExploits0References6
Mend
Mend•added 2026/05/09 7:24 p.m.•14 views

CVE-2026-42574

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...

8.7CVSS8AI score0.00352EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/09 12:00 a.m.•8 views

CVE-2026-42574: Improper Limitation of a Pathname to a Restricted Directory

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...

7.5CVSS8AI score0.00352EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/09 12:00 a.m.•9 views

CVE-2026-42575: Insufficient Verification of Data Authenticity

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...

7.5CVSS8.2AI score0.00159EPSS
SaveExploits0References3
Rows per page
Query Builder