Open Source Vulnerabilities

github.com/containerd/containerd, github.com/containerd/containerd

containerd environment variable leak

github.com/hashicorp/vault

Improper Authentication in HashiCorp Vault

github.com/moby/moby, github.com/moby/moby

moby docker daemon crash during image pull of malicious image

github.com/moby/moby, github.com/moby/moby

moby Access to remapped root allows privilege escalation to real root

github.com/moby/moby, github.com/docker/docker

Path Traversal in Moby builder

github.com/hashicorp/vault, github.com/hashicorp/vault

Enumeration of users in HashiCorp Vault

github.com/hashicorp/consul, github.com/hashicorp/consul, github.com/hashicorp/consul

Privilege Escalation in HashiCorp Consul

github.com/hashicorp/consul, github.com/hashicorp/consul

Denial of service in HashiCorp Consul

github.com/grafana/grafana

Grafana Arbitrary File Read

github.com/opencontainers/runc

runc vulnerable to container breakout through process.cwd trickery and leaked fds

github.com/moby/buildkit

BuildKit vulnerable to possible panic when incorrect parameters sent from frontend

github.com/moby/buildkit

BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts

github.com/moby/buildkit

BuildKit vulnerable to possible host system access from mount stub cleaner

github.com/moby/buildkit

Buildkit's interactive containers API does not validate entitlements check

nodemailer

nodemailer ReDoS when trying to send a specially crafted email

github.com/anchore/stereoscope

stereoscope vulnerable to tar path traversal when processing OCI tar archives

facileManager Privilege Escalation via Mass Assignment

facileManager Authenticated Variable Manipulation leading to SQL Injection

facileManager Systemic Cross-Site Scripting (XSS)

minio, minio, minio, minio, minio, minio

buildkit, buildkit, buildkit, buildkit, buildkit, buildkit, docker, docker, docker, docker, docker, docker, docker, podman, podman, podman, podman, podman, singularity, singularity, singularity, singularity, singularity, singularity

buildkit, buildkit, buildkit, buildkit, buildkit, buildkit, docker, docker, docker, docker, docker, docker, docker, podman, podman, podman, podman, podman, singularity, singularity, singularity, singularity, singularity, singularity

buildkit, buildkit, buildkit, buildkit, buildkit, buildkit, docker, docker, docker, docker, docker, docker, docker, podman, podman, podman, podman, podman, singularity, singularity, singularity, singularity, singularity, singularity

docker-compose

CVE-2024-23653 affecting package docker-compose for versions less than 2.27.0-1

docker-buildx

CVE-2024-23653 affecting package docker-buildx for versions less than 0.14.0-1

moby-engine

CVE-2024-23652 affecting package moby-engine for versions less than 25.0.3-1

moby-engine

CVE-2024-23651 affecting package moby-engine for versions less than 25.0.3-1

moby-engine

CVE-2024-23653 affecting package moby-engine for versions less than 25.0.3-1

moby-buildx

CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18

moby-cli

CVE-2024-23653 affecting package moby-cli for versions less than 20.10.27-3

moby-compose

CVE-2024-23653 affecting package moby-compose for versions less than 2.17.2-7

moby-engine

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3

moby-engine

CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4

moby-engine

CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4

buildkit, buildkit, buildkit, buildkit, buildkit, buildkit, docker, docker, docker, docker, docker, docker, docker, singularity, singularity, singularity, singularity, singularity, singularity

runc, runc, runc, runc, runc, runc, runc

runc, runc, runc

docker-compose

CVE-2024-23650 affecting package docker-compose for versions less than 2.27.0-1

docker-buildx

CVE-2024-23650 affecting package docker-buildx for versions less than 0.14.0-1

moby-engine

CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1

cri-tools

CVE-2024-21626 affecting package cri-tools for versions less than 1.30.1-1

kubernetes

CVE-2024-21626 affecting package kubernetes for versions less than 1.30.1-1

kubevirt

CVE-2024-21626 affecting package kubevirt for versions less than 1.2.0-1

moby-engine

CVE-2024-21626 affecting package moby-engine for versions less than 25.0.3-1

podman

CVE-2024-21626 affecting package podman for versions less than 5.6.1-2

buildah

CVE-2024-21626 affecting package buildah for versions less than 1.41.4-2

cri-tools

CVE-2024-21626 affecting package cri-tools for versions less than 1.28.0-5

kubernetes

CVE-2024-21626 affecting package kubernetes for versions less than 1.28.4-3

kubevirt

CVE-2024-21626 affecting package kubevirt for versions less than 0.59.0-14

moby-compose

CVE-2024-23650 affecting package moby-compose for versions less than 2.17.3-5