{
  "version": "1.0.0",
  "reviewedAt": "2026-09-16",
  "expiresAt": "2026-09-23T00:00:00Z",
  "scope": "Reference promotion policy; review matches also stop promotion. Not a claim of universal exploitability.",
  "entries": [
    {
      "id": "CVE-2026-5450",
      "component": "glibc",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "One-byte scanf heap overwrite requires a specific %mc width and controlled input. Use distribution patch/backport evidence, not only the upstream version.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
      "source": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
    },
    {
      "id": "CVE-2026-0861",
      "component": "glibc",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "memalign-family integer overflow requires control of very large size and alignment inputs. Review the call path and distribution fixes.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-0861",
      "source": "https://sourceware.org/bugzilla/show_bug.cgi?id=33796"
    },
    {
      "id": "CVE-2026-5928",
      "component": "glibc",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "ungetwc can crash or under-read a buffer under particular character-encoding conditions. Disclosure is not a demonstrated RCE.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
      "source": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
    },
    {
      "id": "CVE-2026-5358",
      "component": "glibc",
      "scope": "rejected",
      "decision": "excluded",
      "state": "REJECTED",
      "note": "CNA rejected the NIS+ issue: the provisional API and trusted-server requirement did not establish the claimed security boundary crossing.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-5358",
      "source": "https://www.cve.org/CVERecord?id=CVE-2026-5358"
    },
    {
      "id": "CVE-2026-5435",
      "component": "glibc",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Deprecated DNS printing functions can write out of bounds on TSIG records. Patch the distribution package; review legacy API use.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
      "source": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
    },
    {
      "id": "CVE-2026-45447",
      "component": "OpenSSL",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "PKCS7_verify use-after-free; conditional code execution, not all TLS processing. Fix floors: 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1. CMS APIs are not affected.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
      "source": "https://openssl-library.org/news/secadv/20260609.txt"
    },
    {
      "id": "CVE-2026-21441",
      "component": "urllib3",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Redirect decompression can exhaust resources with preload_content=False. Affected 1.22 to before 2.6.3; disabling redirects is a limited workaround.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
      "source": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
    },
    {
      "id": "CVE-2026-21226",
      "component": "azure-core Python",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Authorized network attacker and unsafe deserialization. Affected 1.1.0 to before 1.38.0; not a universal unauthenticated RCE.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-21226",
      "source": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21226"
    },
    {
      "id": "CVE-2026-50195",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Checkpoint import can poison a local image tag consumed by another pod under IfNotPresent/Never. Fix floors 2.1.9, 2.2.5, 2.3.2. Victim identity is not automatically host root.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-50195",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574"
    },
    {
      "id": "CVE-2026-53492",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Untrusted checkpoint CDI edits require enabled CDI and a matching host device specification. Fix floors 2.1.9, 2.2.5, 2.3.2.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
    },
    {
      "id": "CVE-2026-53488",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Unvalidated image labels can reach a label-consuming plugin and host execution. Fix floors 1.7.33, 2.0.10, 2.1.9, 2.2.5, 2.3.2.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
    },
    {
      "id": "CVE-2026-46680",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Numeric image User parsing can bypass runAsNonRoot. Fix floors 1.7.32, 2.0.9, 2.2.4, 2.3.1; subsequent advisories need newer fixes. Container root is not host root.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-46680",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w"
    },
    {
      "id": "CVE-2026-53489",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Checkpoint log symlink handling can expose host files through container logs. Fix floors 2.1.9, 2.2.5, 2.3.2.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-53489",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388"
    },
    {
      "id": "CVE-2026-47262",
      "component": "containerd",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Crafted image causes runtime memory exhaustion. Fix floors 1.7.33, 2.0.10, 2.1.9, 2.2.5, 2.3.2; package scanning alone does not inspect every malicious metadata condition.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-47262",
      "source": "https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq"
    },
    {
      "id": "CVE-2026-34040",
      "component": "Moby / Docker Engine",
      "scope": "node/runtime",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Daemon authorization-plugin bypass, fixed in 29.3.1. A workload-image scan does not attest to the node daemon.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-34040",
      "source": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2"
    },
    {
      "id": "CVE-2026-56848",
      "component": "Node.js",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "HTTP/2 re-entrancy produces use-after-free in affected 22.x, 24.x, 26.x lines. Apply July 2026 security releases or later supported fixes; bug class alone is not reliable RCE proof.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-56848",
      "source": "https://nodejs.org/en/blog/vulnerability/july-2026-security-releases"
    },
    {
      "id": "CVE-2026-58043",
      "component": "Node.js",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Permission-model path boundary handling over-grants filesystem access. Requires --permission and relevant grants; consult July 2026 fixes.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-58043",
      "source": "https://nodejs.org/en/blog/vulnerability/july-2026-security-releases"
    },
    {
      "id": "CVE-2026-21636",
      "component": "Node.js",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Experimental v25 network permission boundary can be bypassed via Unix-domain sockets. Review local socket access as well as TCP egress.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-21636",
      "source": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
    },
    {
      "id": "CVE-2026-75604",
      "component": "Next.js",
      "scope": "platform review",
      "decision": "review",
      "state": "PUBLISHED",
      "note": "Windows-hosted routing/cache path traversal can expose build data and enable RCE under documented conditions. Fixes 15.5.24 and 16.3.3. Linux match requires applicability review.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-75604",
      "source": "https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36"
    },
    {
      "id": "CVE-2026-4342",
      "component": "ingress-nginx",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Combined annotations permit configuration injection under controller authority. Fix floors 1.13.9, 1.14.5, 1.15.1; review current support and follow-ups.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-4342",
      "source": "https://github.com/kubernetes/kubernetes/issues/137893"
    },
    {
      "id": "CVE-2026-3288",
      "component": "ingress-nginx",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "rewrite-target annotation injection; separate from path-field injection. Fix floors 1.13.8, 1.14.4, 1.15.0.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-3288",
      "source": "https://github.com/kubernetes/kubernetes/issues/137560"
    },
    {
      "id": "CVE-2026-24512",
      "component": "ingress-nginx",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Ingress path-field injection can expose controller-accessible Secrets. Fix floors 1.13.7, 1.14.3; review Ingress write authority.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-24512",
      "source": "https://github.com/kubernetes/kubernetes/issues/136678"
    },
    {
      "id": "CVE-2026-42945",
      "component": "NGINX native engine",
      "scope": "image/controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Native rewrite-module heap overflow requires a particular directive/capture pattern; code execution depends on ASLR conditions. Open Source fix 1.30.1, also 1.31.0; Plus has separate patch lines.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-42945",
      "source": "https://my.f5.com/manage/s/article/K000161019"
    },
    {
      "id": "CVE-2026-33555",
      "component": "HAProxy",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "HTTP/3 body-length handling can cause backend request desynchronization. Introduced in 2.6; record cites 3.3.6 fix. Check maintained-branch backports.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-33555",
      "source": "https://www.haproxy.org"
    },
    {
      "id": "CVE-2026-55204",
      "component": "HAProxy",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "HPACK NULL dereference under memory pressure causes worker DoS. Record covers through 3.4.0 and fix commit 9a6d1fe; verify its inclusion in your release.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-55204",
      "source": "https://github.com/haproxy/haproxy/commit/9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a513"
    },
    {
      "id": "CVE-2026-25518",
      "component": "cert-manager",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Attacker-controlled/intercepted DNS can crash DNS-01 processing. Affected 1.18.0–1.18.4 and 1.19.0–1.19.2; fixes 1.18.5, 1.19.3. Availability impact, not credential theft.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-25518",
      "source": "https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv"
    },
    {
      "id": "CVE-2026-41184",
      "component": "Calico install-cni",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Token-template substitution can log ServiceAccount credentials; default kubeconfig path is unaffected. Fixes include 3.31.6 and 3.32.0; review log readers and rotate established exposures.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-41184",
      "source": "https://www.tigera.io/security-bulletins/tta-2026-001/"
    },
    {
      "id": "CVE-2026-41185",
      "component": "Calico Azure IPAM",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Token-based configurations can write credentials to node CNI logs. Edition-specific fixes differ; inventory log readers and rotate confirmed exposures.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-41185",
      "source": "https://www.tigera.io/security-bulletins/tta-2026-002/"
    },
    {
      "id": "CVE-2026-6720",
      "component": "calicoctl",
      "scope": "tool image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Explicit info/debug logging can disclose connection credentials. Default panic logging is unaffected. Review CI logs and edition-specific fixes.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-6720",
      "source": "https://www.tigera.io/security-bulletins/tta-2026-003/"
    },
    {
      "id": "CVE-2026-41186",
      "component": "Calico debug server",
      "scope": "controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Opt-in unauthenticated pprof listeners can expose sensitive process data; disabled by default. Calico fixes include 3.31.6, 3.32.1; other editions differ.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-41186",
      "source": "https://www.tigera.io/security-bulletins/tta-2026-004/"
    },
    {
      "id": "CVE-2026-24051",
      "component": "OpenTelemetry Go SDK",
      "scope": "platform review",
      "decision": "review",
      "state": "PUBLISHED",
      "note": "Local PATH hijacking of ioreg is macOS/Darwin-specific, not generic Linux CSI RCE. Fixed 1.40.0; advisory lower-bound fields differ between 1.20.0 and 1.21.0.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-24051",
      "source": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-9h8m-3fm2-qjrq"
    },
    {
      "id": "CVE-2025-61729",
      "component": "Go crypto/x509",
      "scope": "image",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Certificate hostname-error formatting can exhaust resources. Fixes Go 1.24.11 and 1.25.5; rebuild affected binaries, not just the OS base.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
      "source": "https://go.dev/cl/725920"
    },
    {
      "id": "CVE-2026-53435",
      "component": "Jenkins",
      "scope": "CI controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "config.xml deserialization can cross into HTTP handling and privileged actions. Fixes 2.568 / LTS 2.555.3. No exploitation-in-hours claim is asserted.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-53435",
      "source": "https://www.jenkins.io/security/advisory/2026-06-10/#SECURITY-3707"
    },
    {
      "id": "CVE-2026-70426",
      "component": "Jenkins Remoting",
      "scope": "CI controller/agent",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Fallback deserialization class-filter bypass for malicious agents or Agent/Connect holders. Fixes Jenkins 2.576 / LTS 2.568.2; consult Remoting branch fixes.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-70426",
      "source": "https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3911"
    },
    {
      "id": "CVE-2026-84645",
      "component": "Jenkins",
      "scope": "CI controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Nested top-level configuration objects can handle HTTP requests and lead to RCE. Fixes 2.580 / LTS 2.568.3; earlier floors do not cover this follow-up.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-84645",
      "source": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3972"
    },
    {
      "id": "CVE-2026-33001",
      "component": "Jenkins",
      "scope": "CI controller",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Unsafe tar symlink extraction can write under controller permissions; job configuration or agent control required. Fixes 2.555 / LTS 2.541.3.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2026-33001",
      "source": "https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3657"
    },
    {
      "id": "CVE-2022-36804",
      "component": "Bitbucket Server / Data Center",
      "scope": "CI control plane",
      "decision": "deny",
      "state": "PUBLISHED",
      "note": "Command injection requires repository read access, possibly anonymous for public repositories. Historical 2022 vulnerability; use vendor branch-specific ranges.",
      "record": "https://www.cve.org/CVERecord?id=CVE-2022-36804",
      "source": "https://jira.atlassian.com/browse/BSERV-13438"
    }
  ]
}