https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:09:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03651 bdu:2019-03651 https://cve.radiocsirt.org/vuln/bdu:2019-03651 https://cve.radiocsirt.org/vuln/cnvd-2020-22383 cnvd-2020-22383 https://cve.radiocsirt.org/vuln/cnvd-2020-22383 https://cve.radiocsirt.org/vuln/euvd-2026-55519 EUVD-2026-55519 https://cve.radiocsirt.org/vuln/euvd-2026-55519 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13139 <p>In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the &#34;docker build&#34; command would be able to gain command execution. An issue exists in the way &#34;docker build&#34; processes remote git URLs, and results in command injection into the underlying &#34;git clone&#34; command, leading to code execution in the context of the user executing the &#34;docker build&#34; command. This occurs because git ref can be misinterpreted as a flag.</p> <p>In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the &#34;docker build&#34; command would be able to gain command execution. An issue exists in the way &#34;docker build&#34; processes remote git URLs, and results in command injection into the underlying &#34;git clone&#34; command, leading to code execution in the context of the user executing the &#34;docker build&#34; command. This occurs because git ref can be misinterpreted as a flag.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-13139 https://cve.radiocsirt.org/vuln/ghsa-33j8-c2xf-8225 <p>In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the &#34;docker build&#34; command would be able to gain command execution. An issue exists in the way &#34;docker build&#34; processes remote git URLs, and results in command injection into the underlying &#34;git clone&#34; command, leading to code execution in the context of the user executing the &#34;docker build&#34; command. This occurs because git ref can be misinterpreted as a flag.</p> <p>In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the &#34;docker build&#34; command would be able to gain command execution. An issue exists in the way &#34;docker build&#34; processes remote git URLs, and results in command injection into the underlying &#34;git clone&#34; command, leading to code execution in the context of the user executing the &#34;docker build&#34; command. This occurs because git ref can be misinterpreted as a flag.</p> https://cve.radiocsirt.org/vuln/ghsa-33j8-c2xf-8225 https://cve.radiocsirt.org/vuln/gsd-2019-13139 gsd-2019-13139 https://cve.radiocsirt.org/vuln/gsd-2019-13139 https://cve.radiocsirt.org/vuln/msrc_cve-2019-13139 msrc_CVE-2019-13139 https://cve.radiocsirt.org/vuln/msrc_cve-2019-13139 https://cve.radiocsirt.org/vuln/rhba-2019:3092 <p>docker: command injection due to a missing validation of the git ref command</p> <p>docker: command injection due to a missing validation of the git ref command</p> https://cve.radiocsirt.org/vuln/rhba-2019:3092