{"kind": "stack", "path": "vulns/stack/containers", "name": "containers", "stack": "containers", "items": [{"id": "CVE-2026-95838", "noindex": false, "published": "2026-10-12T19:53:24.599Z", "modified": "2026-10-13T20:24:33.956Z", "cvss": 4.6, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00215, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-95838", "title": "containerd: Unpack DoS via repeated opaque whiteouts", "description": "containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are processed. Pulling or importing the image can consume CPU, delay container startup, and reduce image-pull concurrency for unrelated deployments. This issue is fixed in versions 1.7.35, 2.0.12, 2.2.8, and 2.3.5.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4", "https://github.com/containerd/containerd/commit/e6ca378dcfa610d06589a3ac96aa992de866e4f0", "https://nvd.nist.gov/vuln/detail/CVE-2026-95838"], "fixes": [], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-95837", "noindex": false, "published": "2026-10-12T19:37:49.999Z", "modified": "2026-10-13T17:22:08.473Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00106, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-95837", "title": "containerd CRI plugin: Checkpoint restore bypasses destination security context", "description": "containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a container from a crafted checkpoint can supply restored credentials, capabilities, no_new_privs, and seccomp state. The restored process can run as root with full capabilities and no enforced seccomp filters while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected. This issue is fixed in ver", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f", "https://github.com/containerd/containerd/pull/13913", "https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f"], "fixes": [], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-92543", "noindex": false, "published": "2026-10-07T16:44:21.237Z", "modified": "2026-10-07T20:31:28.770Z", "cvss": 7.6, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00087, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-92543", "title": "Docker Engine insecure-registry fallback via malicious DNS responses", "description": "Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.", "references": ["https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73", "https://nvd.nist.gov/vuln/detail/CVE-2026-92543"], "fixes": ["29.8.2", "v2.0.0-beta.25"], "products": [{"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker.io", "path": "vulns/debian-12/docker.io", "ecosystem": "Debian:12"}, {"name": "docker.io", "path": "vulns/debian-13/docker.io", "ecosystem": "Debian:13"}, {"name": "docker.io", "path": "vulns/debian-14/docker.io", "ecosystem": "Debian:14"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-16.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-18.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-20.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-20.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-22.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-22.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-24.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-92542", "noindex": false, "published": "2026-10-07T16:42:20.998Z", "modified": "2026-10-07T20:30:49.884Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00066, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-92542", "title": "Blind VXLAN injection into encrypted overlay networks from cluster peer", "description": "The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec parameters which meets the following criteria:\n\n- UDP datagram\n- Destination port is the Swarm data-path port\n- Datagram starts with a VXLAN header for the VNI of an encrypted overlay network which any running container on the node is connected to", "references": ["https://github.com/moby/moby/security/advisories/GHSA-6m9p-4h64-m6vh", "https://nvd.nist.gov/vuln/detail/CVE-2026-92542"], "fixes": ["25.0.19", "29.8.2", "v2.0.0-beta.25", "v25.0.19"], "products": [{"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker engine overlay network driver", "path": "vulns/docker-engine-overlay-network-driver", "ecosystem": ""}, {"name": "moby overlay network driver", "path": "vulns/moby-overlay-network-driver", "ecosystem": ""}, {"name": "docker.io", "path": "vulns/debian-12/docker.io", "ecosystem": "Debian:12"}, {"name": "docker.io", "path": "vulns/debian-13/docker.io", "ecosystem": "Debian:13"}, {"name": "docker.io", "path": "vulns/debian-14/docker.io", "ecosystem": "Debian:14"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-16.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-18.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-20.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-20.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-22.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-22.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}]}, {"id": "CVE-2026-19444", "noindex": false, "published": "2026-09-28T11:38:10.699Z", "modified": "2026-09-28T18:09:01.767Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N", "severity": "medium", "epss": 0.00228, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-19444", "title": "Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes", "description": "A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user's local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.", "references": ["https://github.com/kubernetes/kubernetes/issues/141294", "https://github.com/kubernetes/kubernetes/pull/141296", "https://groups.google.com/g/kubernetes-security-announce/c/v_ob5Gf4-eY"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2026-53493", "noindex": false, "published": "2026-09-25T00:06:43.298Z", "modified": "2026-09-28T14:58:33.011Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00356, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-53493", "title": "Containerd has image-pull DoS via crafted OCI index graph amplification", "description": "containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645", "https://nvd.nist.gov/vuln/detail/CVE-2026-53493"], "fixes": ["2.1.9+ds1-5"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-53495", "noindex": false, "published": "2026-09-14T17:18:06.885Z", "modified": "2026-09-14T17:34:38.488Z", "cvss": 6.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00162, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-53495", "title": "containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service", "description": "containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/container_execsync.go when CRI ExecSync is used by exec probes or lifecycle hooks that launch long-lived background child processes retaining standard input and output pipes. The input and output drain phase has no default timeout and did not stop when the request context was canceled, so repeated ExecSync invocations can accumulate blocked goroutines and host memory. The resulting resource exhaustion can cause the OOM killer to te", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv", "https://github.com/containerd/containerd/commit/22ccf4314d1fe0834f8e28f10d37d5305ef9880c", "https://github.com/containerd/containerd/commit/5a2a3a759b0d2ad8c821b33c3afc20890daf6d81"], "fixes": ["2.1.9+ds1-4"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-17106", "noindex": false, "published": "2026-08-18T18:35:13.465Z", "modified": "2026-08-19T03:56:16.526Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0044, "kev": false, "exploits": ["github-poc", "public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-17106", "title": "Tar extraction in moby/go-archive can write outside the destination directory via link following", "description": "The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.", "references": ["https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h", "https://docs.docker.com/desktop/release-notes/#4860", "https://github.com/docker/sbx-releases/releases/tag/v0.38.0"], "fixes": ["0.3.0", "0.3.3-1", "0.38.0", "29.7.0", "4.86.0", "5.4.0"], "products": [{"name": "go-archive", "path": "vulns/go-archive", "ecosystem": ""}, {"name": "docker sandboxes", "path": "vulns/docker-sandboxes", "ecosystem": ""}, {"name": "docker desktop", "path": "vulns/docker-desktop", "ecosystem": ""}, {"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker cli", "path": "vulns/docker-cli", "ecosystem": ""}, {"name": "docker compose", "path": "vulns/docker-compose", "ecosystem": ""}, {"name": "golang-github-moby-go-archive", "path": "vulns/debian-14/golang-github-moby-go-archive", "ecosystem": "Debian:14"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-16.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-18.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-20.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-20.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-22.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:22.04:LTS"}]}, {"id": "CVE-2026-41186", "noindex": false, "published": "2026-07-30T14:45:04.418Z", "modified": "2026-07-30T16:10:53.298Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L", "severity": "medium", "epss": 0.00666, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41186", "title": "Unauthenticated Go pprof exposure in Calico debug server", "description": "When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authentication. Any pod with network reachability to the listener can retrieve the process heap, goroutine stacks (including function arguments), and command-line arguments. Depending on the process's in-memory state, the heap may contain sensitive material. The debug listener is opt-in but is unsafe when enabled because it offers no authentication and no safe localhost-only binding option.", "references": ["https://github.com/projectcalico/calico/pull/12491", "https://github.com/projectcalico/calico/pull/12634", "https://github.com/projectcalico/calico/pull/12633"], "fixes": ["22.4.0", "3.21.7", "3.22.4", "3.31.6", "3.32.1"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}, {"name": "calico enterprise", "path": "vulns/calico-enterprise", "ecosystem": ""}, {"name": "calico cloud", "path": "vulns/calico-cloud", "ecosystem": ""}]}, {"id": "CVE-2026-41187", "noindex": false, "published": "2026-07-30T14:45:04.247Z", "modified": "2026-07-30T16:11:27.341Z", "cvss": 6.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:H", "severity": "medium", "epss": 0.00388, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41187", "title": "Calico Tier Authorization Bypass via DeleteCollection", "description": "Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard verbs on tier-scoped policy resources can bulk-delete policies in tiers they otherwise have no rights on, breaking the tier authorization boundary.", "references": ["https://github.com/projectcalico/calico/pull/12731", "https://github.com/projectcalico/calico/pull/12735", "https://github.com/projectcalico/calico/pull/12736"], "fixes": ["22.4.0", "3.21.7", "3.22.5", "3.31.6", "3.32.1"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}, {"name": "calico enterprise", "path": "vulns/calico-enterprise", "ecosystem": ""}, {"name": "calico cloud", "path": "vulns/calico-cloud", "ecosystem": ""}]}, {"id": "CVE-2026-6540", "noindex": false, "published": "2026-07-30T14:45:04.068Z", "modified": "2026-07-30T16:12:07.691Z", "cvss": 7.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L", "severity": "high", "epss": 0.00539, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-6540", "title": "L7 policy bypass via unnormalized HTTP path matching", "description": "Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes authorizes the request under the permitted prefix while the downstream workload or a fronting proxy normalizes the path and serves the restricted endpoint. An attacker with network access and no special RBAC can potentially reach HTTP endpoints the policy was intended to restrict.", "references": ["https://github.com/projectcalico/calico/pull/12531", "https://github.com/projectcalico/calico/pull/12532", "https://github.com/projectcalico/calico/pull/12533"], "fixes": ["22.4.0", "3.21.7", "3.22.4", "3.31.6"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}, {"name": "calico enterprise", "path": "vulns/calico-enterprise", "ecosystem": ""}, {"name": "calico cloud", "path": "vulns/calico-cloud", "ecosystem": ""}]}, {"id": "CVE-2026-62290", "noindex": false, "published": "2026-07-16T19:37:40.255Z", "modified": "2026-07-18T03:10:55.978Z", "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "severity": "high", "epss": 0.00112, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-62290", "title": "cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials", "description": "cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace users without admission validation tying the Challenge to an Order, owner reference, or Issuer-selected solver, allowing attacker-controlled Challenge.spec.solver values referencing a ClusterIssuer to bypass DNS01 solver selectors such as dnsZones, dnsNames, and matchLabels and cause cert-manager to use ClusterIssuer DNS credentials for attacker-sele", "references": ["https://github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258", "https://github.com/cert-manager/cert-manager/pull/8940", "https://github.com/cert-manager/cert-manager/pull/8941"], "fixes": [], "products": [{"name": "cert-manager", "path": "vulns/cert-manager", "ecosystem": ""}]}, {"id": "CVE-2026-53489", "noindex": false, "published": "2026-07-01T18:10:41.802Z", "modified": "2026-07-02T14:34:50.018Z", "cvss": 8.2, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "severity": "high", "epss": 0.00174, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-53489", "title": "containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore", "description": "containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388", "https://nvd.nist.gov/vuln/detail/CVE-2026-53489"], "fixes": ["2.1.6-0ubuntu1~25.10.2", "2.1.9+ds1-1", "2.2.1-0ubuntu1~22.04.2", "2.2.1-0ubuntu1~24.04.3", "2.2.1-0ubuntu1~25.10.2", "2.2.2-0ubuntu1.1"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd-app", "path": "vulns/ubuntu-22.04-lts/containerd-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-25.10/containerd-app", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-stable", "path": "vulns/ubuntu-25.10/containerd-stable", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-app", "path": "vulns/ubuntu-26.04-lts/containerd-app", "ecosystem": "Ubuntu:26.04:LTS"}, {"name": "containerd-stable", "path": "vulns/ubuntu-26.04-lts/containerd-stable", "ecosystem": "Ubuntu:26.04:LTS"}]}, {"id": "CVE-2026-53492", "noindex": false, "published": "2026-07-01T17:59:12.552Z", "modified": "2026-07-02T12:50:43.273Z", "cvss": 8.4, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N", "severity": "high", "epss": 0.00353, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-53492", "title": "containerd CRI checkpoint restore CDI annotation smuggling", "description": "containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into th", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc", "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"], "fixes": ["2.1.6-0ubuntu1~25.10.2", "2.1.9+ds1-1", "2.2.1-0ubuntu1~22.04.2", "2.2.1-0ubuntu1~24.04.3", "2.2.1-0ubuntu1~25.10.2", "2.2.2-0ubuntu1.1"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd-app", "path": "vulns/ubuntu-22.04-lts/containerd-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-25.10/containerd-app", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-stable", "path": "vulns/ubuntu-25.10/containerd-stable", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-app", "path": "vulns/ubuntu-26.04-lts/containerd-app", "ecosystem": "Ubuntu:26.04:LTS"}, {"name": "containerd-stable", "path": "vulns/ubuntu-26.04-lts/containerd-stable", "ecosystem": "Ubuntu:26.04:LTS"}]}, {"id": "CVE-2026-50195", "noindex": false, "published": "2026-07-01T17:50:53.072Z", "modified": "2026-07-01T18:32:29.659Z", "cvss": 5.6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:L", "severity": "medium", "epss": 0.00303, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-50195", "title": "containerd: CRI checkpoint import allows local image tag poisoning", "description": "containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the attacker's malicious image inste", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574", "https://nvd.nist.gov/vuln/detail/CVE-2026-50195"], "fixes": ["2.1.6-0ubuntu1~25.10.2", "2.1.9+ds1-1", "2.2.1-0ubuntu1~22.04.2", "2.2.1-0ubuntu1~24.04.3", "2.2.1-0ubuntu1~25.10.2", "2.2.2-0ubuntu1.1"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd-app", "path": "vulns/ubuntu-22.04-lts/containerd-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-25.10/containerd-app", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-stable", "path": "vulns/ubuntu-25.10/containerd-stable", "ecosystem": "Ubuntu:25.10"}, {"name": "containerd-app", "path": "vulns/ubuntu-26.04-lts/containerd-app", "ecosystem": "Ubuntu:26.04:LTS"}, {"name": "containerd-stable", "path": "vulns/ubuntu-26.04-lts/containerd-stable", "ecosystem": "Ubuntu:26.04:LTS"}]}, {"id": "CVE-2026-47262", "noindex": false, "published": "2026-07-01T17:48:43.205Z", "modified": "2026-07-01T18:34:06.714Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00265, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-47262", "title": "containerd image-triggered runtime DoS via unbounded group parsing", "description": "containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq", "https://nvd.nist.gov/vuln/detail/CVE-2026-47262"], "fixes": ["1.2.6-0ubuntu1~16.04.6+esm7", "1.6.12-0ubuntu1~18.04.1+esm4", "1.6.12-0ubuntu1~20.04.8+esm2", "1.6.12-0ubuntu1~22.04.11", "1.6.24~ds1-1ubuntu1.3+esm3", "1.7.24-0ubuntu1~20.04.2+esm2", "2.1.6-0ubuntu1~25.10.2", "2.1.9+ds1-1", "2.2.1-0ubuntu1~22.04.2", "2.2.1-0ubuntu1~24.04.3", "2.2.1-0ubuntu1~25.10.2"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-22.04-lts/containerd-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-46680", "noindex": false, "published": "2026-07-01T17:40:25.499Z", "modified": "2026-07-03T03:56:06.341Z", "cvss": 7.3, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00163, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-46680", "title": "containerd user ID handling bypass allows runAsNonRoot evasion", "description": "containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w", "https://nvd.nist.gov/vuln/detail/CVE-2026-46680"], "fixes": ["2.1.9+ds1-1"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}, {"id": "CVE-2026-53488", "noindex": false, "published": "2026-07-01T00:11:20.610Z", "modified": "2026-07-03T03:56:07.868Z", "cvss": 9.4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "severity": "critical", "epss": 0.00176, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-53488", "title": "containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull", "description": "containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10.", "references": ["https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp", "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"], "fixes": ["1.6.12-0ubuntu1~18.04.1+esm4", "1.6.12-0ubuntu1~20.04.8+esm2", "1.6.12-0ubuntu1~22.04.11", "1.6.24~ds1-1ubuntu1.3+esm3", "1.7.24-0ubuntu1~20.04.2+esm2", "2.1.6-0ubuntu1~25.10.2", "2.1.9+ds1-1", "2.2.1-0ubuntu1~22.04.2", "2.2.1-0ubuntu1~24.04.3", "2.2.1-0ubuntu1~25.10.2", "2.2.2-0ubuntu1.1"], "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-22.04-lts/containerd-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-25.10/containerd", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41579", "noindex": false, "published": "2026-07-01T00:02:08.639Z", "modified": "2026-07-01T13:35:41.354Z", "cvss": 3.3, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "severity": "low", "epss": 0.00186, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41579", "title": "runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations", "description": "runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and os.Symlink with a filepath.Join string which allow an image with /dev as a symlink to trick runc into deleting files called ptmx on the host or creating a hardcoded set of symlinks with specific names and targets in an arbitrary pre-existing host directory. This issue is not exploitable under Docker, because Docker creates a top-level read-only layer that masks any malicious /dev symlink", "references": ["https://github.com/opencontainers/runc/security/advisories/GHSA-xjvp-4fhw-gc47", "https://github.com/opencontainers/runc/commit/864db8042dbb", "https://nvd.nist.gov/vuln/detail/CVE-2026-41579"], "fixes": ["1.3.6+ds1-1"], "products": [{"name": "runc", "path": "vulns/runc", "ecosystem": ""}, {"name": "runc", "path": "vulns/debian-12/runc", "ecosystem": "Debian:12"}, {"name": "runc", "path": "vulns/debian-13/runc", "ecosystem": "Debian:13"}, {"name": "runc", "path": "vulns/debian-14/runc", "ecosystem": "Debian:14"}, {"name": "runc", "path": "vulns/ubuntu-pro-16.04-lts/runc", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "runc", "path": "vulns/ubuntu-pro-18.04-lts/runc", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "runc", "path": "vulns/ubuntu-20.04-lts/runc", "ecosystem": "Ubuntu:20.04:LTS"}, {"name": "runc-app", "path": "vulns/ubuntu-20.04-lts/runc-app", "ecosystem": "Ubuntu:20.04:LTS"}, {"name": "runc", "path": "vulns/ubuntu-22.04-lts/runc", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "runc-app", "path": "vulns/ubuntu-22.04-lts/runc-app", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "runc", "path": "vulns/ubuntu-24.04-lts/runc", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "runc-app", "path": "vulns/ubuntu-24.04-lts/runc-app", "ecosystem": "Ubuntu:24.04:LTS"}]}, {"id": "CVE-2026-42306", "noindex": false, "published": "2026-06-12T18:09:22.188Z", "modified": "2026-06-13T03:25:47.055Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H", "severity": "high", "epss": 0.001, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-42306", "title": "Moby: Race condition in docker cp allows bind mount redirection to host path", "description": "Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.", "references": ["https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh", "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"], "fixes": ["26.1.5+dfsg1-9+deb13u1", "28.5.2+dfsg4-3"], "products": [{"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker.io", "path": "vulns/debian-12/docker.io", "ecosystem": "Debian:12"}, {"name": "docker.io", "path": "vulns/debian-13/docker.io", "ecosystem": "Debian:13"}, {"name": "docker.io", "path": "vulns/debian-14/docker.io", "ecosystem": "Debian:14"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-16.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-18.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-20.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-20.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-22.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-22.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-24.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:24.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-24.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:24.04:LTS"}]}], "total": 149, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 8, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "containerd", "path": "vulns/containerd", "ecosystem": ""}, {"name": "containerd", "path": "vulns/debian-12/containerd", "ecosystem": "Debian:12"}, {"name": "containerd", "path": "vulns/debian-13/containerd", "ecosystem": "Debian:13"}, {"name": "containerd", "path": "vulns/debian-14/containerd", "ecosystem": "Debian:14"}, {"name": "containerd", "path": "vulns/ubuntu-pro-16.04-lts/containerd", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-18.04-lts/containerd", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-20.04-lts/containerd", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-20.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-22.04-lts/containerd", "ecosystem": "Ubuntu:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-pro-22.04-lts/containerd-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "containerd-app", "path": "vulns/ubuntu-24.04-lts/containerd-app", "ecosystem": "Ubuntu:24.04:LTS"}, {"name": "containerd", "path": "vulns/ubuntu-pro-24.04-lts/containerd", "ecosystem": "Ubuntu:Pro:24.04:LTS"}, {"name": "docker engine", "path": "vulns/docker-engine", "ecosystem": ""}, {"name": "docker.io", "path": "vulns/debian-12/docker.io", "ecosystem": "Debian:12"}, {"name": "docker.io", "path": "vulns/debian-13/docker.io", "ecosystem": "Debian:13"}, {"name": "docker.io", "path": "vulns/debian-14/docker.io", "ecosystem": "Debian:14"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-16.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:16.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-18.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:18.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-20.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-20.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:20.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-22.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io-app", "path": "vulns/ubuntu-pro-22.04-lts/docker.io-app", "ecosystem": "Ubuntu:Pro:22.04:LTS"}, {"name": "docker.io", "path": "vulns/ubuntu-pro-24.04-lts/docker.io", "ecosystem": "Ubuntu:Pro:24.04:LTS"}, {"name": "docker engine overlay network driver", "path": "vulns/docker-engine-overlay-network-driver", "ecosystem": ""}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 6, "kev": 0}, "lastmod": "2026-10-13T20:24:33.956Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}