THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-54248 (MEDIUM 6.5) — Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy u

[NVD] CVE-2026-54248 (MEDIUM 6.5) — Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy u

mednvdPublished 2026-09-11

CVE-2026-54248 CVSS: 6.5 MEDIUM Published: 2026-09-11T22:16:38.353

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify that same artifact. When global OCI si

Indicators of compromise

CVE-2026-54248cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54248