{
  "affected": [
    {
      "affectedData": [
        {
          "product": "moby/v2/daemon",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.0.0-beta.14"
            }
          ]
        },
        {
          "product": "Docker Engine",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 29.5.1"
            }
          ]
        },
        {
          "product": "docker/daemon",
          "vendor": "docker",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 28.5.2"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    },
    {
      "affectedData": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
          "product": "Multicluster Global Hub 1.4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1784060681",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
          "product": "Multicluster Global Hub 1.5.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1784562060",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/cephcsi-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932114",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/cephcsi-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782931768",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/devicefinder-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932104",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/mcg-core-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783536000",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/mcg-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783535989",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783536515",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932521",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-metrics-exporter-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783018461",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783018421",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-blackbox-exporter-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932812",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-cli-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783537001",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932919",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783537586",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-cosi-sidecar-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782932969",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-csi-addons-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933015",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933042",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-drbd-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783537392",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933235",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933251",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783537955",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933417",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-must-gather-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783537742",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782933602",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odr-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1783019377",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782934054",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782934036",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/rook-ceph-rhel9-operator",
          "product": "Red Hat Openshift Data Foundation 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782934284",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:exploit_intelligence:0"
          ],
          "defaultStatus": "affected",
          "packageName": "exploit-intelligence-tech-preview/agent-client-rhel9",
          "product": "Exploit Intelligence",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/assisted-service-8-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/assisted-service-9-rhel9",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-api-provider-azure-rhel9",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_lightspeed"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
          "product": "OpenShift Lightspeed",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:source_to_image:1"
          ],
          "defaultStatus": "affected",
          "packageName": "source-to-image/source-to-image-rhel8",
          "product": "OpenShift Source-to-Image (S2I)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:source_to_image:1"
          ],
          "defaultStatus": "affected",
          "packageName": "source-to-image/source-to-image-rhel9",
          "product": "OpenShift Source-to-Image (S2I)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/acm-grafana-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:5"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-5-dashboard-rhel8",
          "product": "Red Hat Ceph Storage 5",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/grafana-rhel9",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/grafana-rhel9",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/grafana-rhel10",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "buildah",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "containers-common",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grype",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "opentelemetry-collector",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "opentelemetry-collector-contrib",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "podman",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "skopeo",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "syft",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "trivy",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-kserve-agent-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-kserve-controller-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-kserve-router-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-mlflow-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-model-metadata-collection-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-model-registry-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-must-gather-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "rhoai/rhai-cli-rhel9",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-agent-installer-api-server-rhel8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-azure-cluster-api-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-gcp-cluster-api-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-openstack-cluster-api-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/opentelemetry-collector-rhel9",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container\u0027s filesystem rather than the host\u0027s due to incorrect ordering of operations. A malicious container image containing a trojanized decompression binary can achieve arbitrary code execution with full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a compressed (xz or gzip) archive into that container. This issue is fixed in Docker Engine 29.5.1 and moby/moby v2.0.0-beta.14. Workarounds include only running containers from trusted images, using authorization plugins to restrict access to the `PUT /containers/{id}/archive` endpoint, and avoiding piping compressed archives into containers created from untrusted images"
    }
  ],
  "id": "CVE-2026-41567",
  "lastModified": "2026-07-22T12:17:49.767",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.8,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 6.0,
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-41567",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-05T13:11:38.173928Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-05T02:17:13.817",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:37387"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:41030"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:42852"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/security/cve/CVE-2026-41567"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41567.json"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/moby/moby/v2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.0-beta.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/docker/docker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "28.5.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/moby/moby"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "28.5.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-41567"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-427"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-05-18T17:47:23Z",
    "nvd_published_at": "2026-06-05T02:17:13Z",
    "severity": "HIGH"
  },
  "details": "## Summary\n\nWhen a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with daemon (host root) privileges.\n\n## Details\n\nWhen handling `PUT /containers/{id}/archive` requests with compressed archives, the daemon decompresses them using external system binaries. Due to incorrect ordering of operations, these binaries are resolved from the container\u0027s filesystem rather than the host\u0027s. A container image that includes a trojanized decompression binary can achieve code execution as the daemon process whenever a compressed archive is uploaded to that container.\n\nThe executed binary runs with the daemon\u0027s full privileges, including host root UID and unrestricted capabilities.\n\n## Impact\n\nArbitrary code execution as host root, crossing the container-to-host trust boundary.\n\n### Conditions for exploitation\n\n- A user must run a container from a malicious image that contains a trojanized decompression binary.\n- The user must then upload a compressed archive (xz or gzip) into that container, either by piping a compressed archive via `docker cp -` or by calling the `PUT /containers/{id}/archive` API directly with compressed content.\n\n### Not affected\n\nStandard `docker cp` usage is **not** affected, because the CLI sends uncompressed tar by default:\n\n```\ndocker cp ./file.txt mycontainer:/file.txt\n```\n\nThis can only be exploited when explicitly passing a xz or gzip-compressed archive to `docker cp` or the `PUT /containers/{id}/archive` API, for example:\n\n```\ncat archive.tar.xz | docker cp - mycontainer:/dir\n```\n\nDecompression formats using pure Go implementations (bzip2, zstd, and gzip when the container image does not contain an `unpigz` binary) are also not affected.\n\n## Workarounds\n\n- Only run containers from trusted images.\n- Use authorization plugins to limit access to the `PUT /containers/{id}/archive` endpoint.\n- Avoid piping compressed archives into containers created from untrusted images.",
  "id": "GHSA-x86f-5xw2-fm2r",
  "modified": "2026-06-09T11:55:27Z",
  "published": "2026-05-18T17:47:23Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/moby/moby"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Docker: `PUT /containers/{id}/archive` executes container binary on the host"
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "docker-stable-24.0.9_ce-18.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the docker-stable-24.0.9_ce-18.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11075",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11075-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33186 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33186/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33747 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33747/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33748 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33748/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33814 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33814/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34040/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-39821 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-39821/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41567 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41567/"
      }
    ],
    "title": "docker-stable-24.0.9_ce-18.1 on GA media",
    "tracking": {
      "current_release_date": "2026-06-22T00:00:00Z",
      "generator": {
        "date": "2026-06-22T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11075-1",
      "initial_release_date": "2026-06-22T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-06-22T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-18.1.aarch64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-18.1.aarch64",
                  "product_id": "docker-stable-24.0.9_ce-18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.25.0-18.1.aarch64",
                "product": {
                  "name": "docker-stable-buildx-0.25.0-18.1.aarch64",
                  "product_id": "docker-stable-buildx-0.25.0-18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-24.0.9_ce-18.1.ppc64le",
                  "product_id": "docker-stable-24.0.9_ce-18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.25.0-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-buildx-0.25.0-18.1.ppc64le",
                  "product_id": "docker-stable-buildx-0.25.0-18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-18.1.s390x",
                "product": {
                  "name": "docker-stable-24.0.9_ce-18.1.s390x",
                  "product_id": "docker-stable-24.0.9_ce-18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.25.0-18.1.s390x",
                "product": {
                  "name": "docker-stable-buildx-0.25.0-18.1.s390x",
                  "product_id": "docker-stable-buildx-0.25.0-18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-18.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-18.1.x86_64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-18.1.x86_64",
                  "product_id": "docker-stable-24.0.9_ce-18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.25.0-18.1.x86_64",
                "product": {
                  "name": "docker-stable-buildx-0.25.0-18.1.x86_64",
                  "product_id": "docker-stable-buildx-0.25.0-18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64"
        },
        "product_reference": "docker-stable-24.0.9_ce-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le"
        },
        "product_reference": "docker-stable-24.0.9_ce-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x"
        },
        "product_reference": "docker-stable-24.0.9_ce-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64"
        },
        "product_reference": "docker-stable-24.0.9_ce-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.25.0-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64"
        },
        "product_reference": "docker-stable-buildx-0.25.0-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.25.0-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le"
        },
        "product_reference": "docker-stable-buildx-0.25.0-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.25.0-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x"
        },
        "product_reference": "docker-stable-buildx-0.25.0-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.25.0-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64"
        },
        "product_reference": "docker-stable-buildx-0.25.0-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33186",
          "url": "https://www.suse.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260085 for CVE-2026-33186",
          "url": "https://bugzilla.suse.com/1260085"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268676 for CVE-2026-33186",
          "url": "https://bugzilla.suse.com/1268676"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33186"
    },
    {
      "cve": "CVE-2026-33747",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33747"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context. The issue has been fixed in v0.28.1. The vulnerability requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33747",
          "url": "https://www.suse.com/security/cve/CVE-2026-33747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260954 for CVE-2026-33747",
          "url": "https://bugzilla.suse.com/1260954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33747"
    },
    {
      "cve": "CVE-2026-33748",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33748"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33748",
          "url": "https://www.suse.com/security/cve/CVE-2026-33748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261046 for CVE-2026-33748",
          "url": "https://bugzilla.suse.com/1261046"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33748"
    },
    {
      "cve": "CVE-2026-33814",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33814"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33814",
          "url": "https://www.suse.com/security/cve/CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264506 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1264506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268758 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1268758"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33814"
    },
    {
      "cve": "CVE-2026-33997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon\u0027s privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33997",
          "url": "https://www.suse.com/security/cve/CVE-2026-33997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265907 for CVE-2026-33997",
          "url": "https://bugzilla.suse.com/1265907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33997"
    },
    {
      "cve": "CVE-2026-34040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34040",
          "url": "https://www.suse.com/security/cve/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261378 for CVE-2026-34040",
          "url": "https://bugzilla.suse.com/1261378"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265929 for CVE-2026-34040",
          "url": "https://bugzilla.suse.com/1265929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34040"
    },
    {
      "cve": "CVE-2026-39821",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-39821"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-39821",
          "url": "https://www.suse.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266474 for CVE-2026-39821",
          "url": "https://bugzilla.suse.com/1266474"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-39821"
    },
    {
      "cve": "CVE-2026-41567",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41567"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container\u0027s filesystem rather than the host\u0027s due to incorrect ordering of operations. A malicious container image containing a trojanized decompression binary can achieve arbitrary code execution with full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a compressed (xz or gzip) archive into that container. This issue is fixed in Docker Engine 29.5.1 and moby/moby v2.0.0-beta.14. Workarounds include only running containers from trusted images, using authorization plugins to restrict access to the `PUT /containers/{id}/archive` endpoint, and avoiding piping compressed archives into containers created from untrusted images",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41567",
          "url": "https://www.suse.com/security/cve/CVE-2026-41567"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267827 for CVE-2026-41567",
          "url": "https://bugzilla.suse.com/1267827"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.25.0-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-18.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-41567"
    }
  ]
}