1435932 matches found
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, podman-fips, kubescape, openbao-fips, buildah, skaffold-fips, buildkitd-fips, kaniko-fips, kaniko, docker-fips, skaffold, kubescape-server-fips, telegraf, ctop-fips, buildah-fips, kubescape-server, openbao, podman, docker-cli-buildx, buildkitd...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni-fips, kube-vip-fips, cni-plugins, cni-plugins-fips, kube-vip...
BuildKit: Custom frontend could bypass Seccomp/AppArmor
Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...
GHSA-7236-3392-C5C6 BuildKit: Custom frontend could bypass Seccomp/AppArmor
Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...
CVE-2026-62317
creationtimestamp| type| source ---|---|--- 2026-08-19 20:21:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jtvriepwcgezg...
CVE-2026-75112
A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...
AZL-97032 CVE-2026-61711 affecting package moby-engine 25.0.3-19
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
CGA-XJ7J-37C9-523X
Bulletin has no description...
CVE-2026-16835
creationtimestamp| type| source ---|---|--- 2026-08-19 20:11:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk3phxuc2p 2026-08-20 00:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthzncgbuo2e 2026-08-24 13:16:43+00:00| seen|...
CVE-2026-71871
creationtimestamp| type| source ---|---|--- 2026-08-19 20:11:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk2jekhx2m 2026-08-20 00:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthyjjhdlf2e 2026-08-22 12:50:05+00:00| seen|...
CVE-2026-71864
creationtimestamp| type| source ---|---|--- 2026-08-19 20:10:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjyw5mu625 2026-08-20 00:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthwtxsbkf24...
CVE-2026-62682
creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjye4kop24 2026-08-19 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthumdxfun2y...
CVE-2026-62681
creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjy3k6bq2t 2026-08-19 23:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthwbzkmpm2u 2026-08-20 00:19:11+00:00| seen|...
CVE-2026-16724
creationtimestamp| type| source ---|---|--- 2026-08-19 20:07:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7ws5f62qj3ajk...
CVE-2026-61711
In BuildKit versions prior to 0.31.1, the file executor/oci/spec_linux.go treated an invalid SecurityMode value from a crafted build request as non-sandbox mode without requiring the security.insecure entitlement, disabling Seccomp and AppArmor protections for the build container. Linux capabilit...
CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
CVE-2026-16866
creationtimestamp| type| source ---|---|--- 2026-08-19 20:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5asdqiy7fz6q6...