MO
Product
model-runner
by docker · last CVE Apr 1, 2026
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add model-runner to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33990
9.1
0%
Apr 1
Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
Affected: < 1.1.25
CVE-2026-28400
7.5
0%
Feb 27
Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint
Affected: < 1.0.16
Showing 2