Vulnerabilidades de Tecnativa
CVEs publicadas que afetam produtos de Tecnativa: 1 registro(s), com severidade, exploração e correções.
CVE-2026-78122
Alta · 7.4
CWE-1220 22/08/2026
docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.