Critical vulnerabilities hidden in hundreds of popular open source containers
Rezilion research identified over 100,000 Dockerfiles in Docker containers that either already contain or are prone to hidden vulnerabilities. Some of them are known to have been exploited in the wild as part of CISA’s Known Exploited Vulnerabilities catalog.
Yotam Perkal David Oro Source Security Foundation Plain Sight Hidden Vulnerabilities Popular Open Source Containers
Source: scmagazine.com