Docker security advisory (AV26-1153)

No short summary was recorded for this item; read the full text at the source.

Vulnerabilities & Zero-Day DevOps & Infrastructure
Read the full article at Canadian Centre for Cyber Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
AWS Security Bulletins

CVE-2026-127119 - Unverified ownership of the default EMR cluster log location in AWS SDK for pandas

Bulletin ID: 2026-181-AWS Publication Date: 11/12/2026 13:00 PM PST Description: We identified CVE-2026-127119, an issue in the EMR module of AWS SDK for pandas (awswrangler) from version 1.1.0 before 3.18.0. When a cluster is created without an explicit log location, the library uses a predictable default S3 bucket name for the cluster logs without verifying that the caller's account owns that bucket. A remote actor…