| CVE-2026-113957 |
An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image…
|
5.6
Medium
|
Oct 29, 2026 |
| CVE-2026-113951 |
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential…
|
7.8
High
|
Oct 23, 2026 |
| CVE-2026-64773 |
An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer…
|
7.5
High
|
Aug 20, 2026 |
| CVE-2026-64777 |
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of…
|
4.3
Medium
|
Aug 20, 2026 |
| CVE-2026-20613 |
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname…
|
7.8
High
|
Jan 22, 2026 |