Skip to content
OpenAdvisories

Package · Go

github.com/portainer/portainer

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-44881 Public exploit

    Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying sta…

    portainer portainer github.com/portainer/portainer Go
  • Critical 9.4
    CVE-2026-44848 Public exploit

    Portainer: Missing authorization on Docker plugin endpoints allows host RCE

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, The Docker plugin management end…

    portainer portainer github.com/portainer/portainer Go
  • Medium 5.3
    CVE-2024-29296 Public exploit

    Portainer CE allows username enumeration through authentication response timing

    A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

    github.com/portainer/portainer Go