Vulnerabilities

TI-2026-59429 CVE-2026-87004

Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification

HIGH 70

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00338 Published 2026-09-30 Fixed in 1.31.3 CWE-347

TI-2026-44487 CVE-2026-62308

HIGH 72

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00346 Published 2026-09-30 Fixed in 1.30.6 CWE-918

TI-2026-40047 CVE-2026-55494

HIGH 82

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0064 Published 2026-09-30 Fixed in 1.30.4 CWE-284

TI-2026-39865 CVE-2026-55181

HIGH 82

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00598 Published 2026-09-30 Fixed in 1.30.3 CWE-284

TI-2026-35252 CVE-2026-47752

HIGH 76

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00438 Published 2026-07-23 Fixed in 1.30.2 CWE-1336

TI-2026-19209 CVE-2026-23846

HIGH 72

Tugtainer is a self-hosted app for automating updates of Docker containers.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00464 Published 2026-01-19 Fixed in 1.16.1 CWE-598

TI-2025-42655 CVE-2025-69201

MEDIUM 44

Tugtainer is a self-hosted app for automating updates of docker containers.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.0046 Published 2025-12-29 Fixed in 1.15.1 CWE-77