Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Docker Sandboxes 0.33.0 Clear all filters
TI-2026-10757 CVE-2026-12539 · GHSA-x6hr-f96v-hhgg

Docker Sandboxes ICMP egress restriction bypass after daemon restart

Priority LOW 22

Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox f…

CVSS 4.0MEDIUM 5.1 Local Low privileges No interaction EPSS 0.0014 Published 2026-06-18 Fixed in 0.33.0 CWE-665
TI-2026-10377 CVE-2026-12039 · GHSA-4crj-qc6g-g3xj

Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution

Priority LOW 24

Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet…

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00103 Published 2026-06-18 Fixed in 0.33.0 CWE-923