799 matches found
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...
GHSA-GV8H-7V7W-R22Q Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...
Docker Compose 路径遍历漏洞
Docker Compose is a Docker open source for defining and running multi-container applications using Docker. A path traversal vulnerability exists in Docker Compose that stems from trusting path information in a remote OCI compose artifact, which could lead an attacker to escape the cache directory...
PT-2025-44043
Name of the Vulnerable Software and Affected Versions Docker Compose versions prior to 2.40.2 Description Docker Compose is affected by a path traversal flaw stemming from improper restriction of path names to accessible directories. This issue allows a remote attacker to overwrite arbitrary file...
ROS-20251014-08
A vulnerability in the Podman OCI container management and launching software tool is related to an insecure link following a problem in the Podman Kube Play command. Exploitation of the vulnerability could allow An attacker to cause a denial of service...
[SECURITY] Fedora 42 Update: cri-o1.33-1.33.5-1.fc42
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 41 Update: oci-seccomp-bpf-hook-1.2.10-8.fc41
OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...
[SECURITY] Fedora 42 Update: oci-seccomp-bpf-hook-1.2.10-9.fc42
OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...
Fedora 41 : oci-seccomp-bpf-hook (2025-5e448ba17a)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5e448ba17a advisory. security fix for CVE-2025-47906 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora: Security Advisory (FEDORA-2025-39dd3e6f91)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-5e448ba17a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : oci-seccomp-bpf-hook (2025-39dd3e6f91)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-39dd3e6f91 advisory. security fix for CVE-2025-47906 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
EUVD-2021-2367
Malware in sbrugna...
EUVD-2018-2953
Malware in sbrugna...
EUVD-2024-2172
Malicious code in bioql PyPI...
EUVD-2024-43563
Malicious code in bioql PyPI...
EUVD-2023-1916
Malicious code in bioql PyPI...
EUVD-2023-0597
Malicious code in bioql PyPI...