tocsin

CVE-2026-33990

2 advisories.

Go/github.com/docker/model-runner CVE-2026-33990: medium

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)

Action: Upgrade github.com/docker/model-runner to 1.1.25 or later.

go get github.com/docker/model-runner@v1.1.25

Affected

introducedfixedlast affected
01.1.25-

Fixed versions

1.1.25

Sources

CVE-2026-33990 · published · modified · JSON

Go/github.com/docker/model-runner CVE-2026-33990: unknown

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) in github.com/docker/model-runner

Action: Upgrade github.com/docker/model-runner to 1.1.25 or later.

go get github.com/docker/model-runner@v1.1.25

Affected

introducedfixedlast affected
01.1.25-

Fixed versions

1.1.25

Sources

CVE-2026-33990 · published · modified · JSON