Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.6EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs.EPSS 0.3%Oct 15, 2026
- Critical9.3runwasi facilitates running Wasm and WASI workloads managed by containerd.Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsOct 15, 2026
- Critical9.0Dokku is a docker-powered platform as a service.EPSS 0.6%Oct 14, 2026
- UnknownGitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled.EPSS 0.2%Oct 14, 2026
- UnknownSecurity update for containerdOct 14, 2026
- UnknownCVE-2026-53492 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Oct 14, 2026
- UnknownCVE-2026-53489 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Oct 14, 2026
- UnknownCVE-2026-53488 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Oct 14, 2026
- UnknownCVE-2026-50195 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Oct 14, 2026
- UnknownCVE-2026-47262 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Oct 14, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextOct 12, 2026
- UnknownSecurity update for containerdOct 10, 2026
- High8.6Dozzle is a realtime log viewer for docker containers.May 26, 2026
- High8.7Dozzle is a realtime log viewer for docker containers.May 26, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.May 22, 2026
- Medium5.9Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- High7.5Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- High8.2Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
54 records · page 1 of 3
PreviousNext