Open Source Vulnerabilities

moby-engine

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14

moby-runc

CVE-2024-21626 affecting package moby-runc for versions less than 1.1.9-4

cri-o

CVE-2024-21626 affecting package cri-o for versions less than 1.21.7-3

podman

CVE-2024-21626 affecting package podman 4.1.1-26

buildah

CVE-2024-21626 affecting package buildah 1.18.0-29

docker.io-app, docker.io-app, docker.io-app

docker.io, docker.io, docker.io-app, docker.io-app, docker.io, docker.io-app, docker.io

docker.io, docker.io, docker.io, docker.io-app, docker.io-app, docker.io, docker.io-app, docker.io

docker.io, docker.io, docker.io-app, docker.io-app, docker.io, docker.io-app, docker.io

MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

BuildKit interactive containers API does not validate entitlements check

BuildKit possible host system access from mount stub cleaner

BuildKit possible race condition with accessing subpaths from cache mounts

BuildKit possible panic when incorrect parameters sent from frontend

runc container breakout through process.cwd trickery and leaked fds

runc, runc, runc

runc vulnerability

runc, runc, runc

mbedtls, mbedtls

Security update for mbedtls

tinyssh, tinyssh

Security update for tinyssh

WordPress Stock Locations for WooCommerce Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

octoprint