confidential-containers
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| trustee | 2 | – | Oct 9, 2025 |
| guest-components | 1 | – | Aug 18, 2026 |
Exploited and recent CVEs
- CVE-2026-47699 Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback 0.3%
- CVE-2025-61779 Trustee's attestation-policy endpoint is not protected by admin autentication 0.4%
- CVE-2024-51997 The Attestation Results Token can be arbitrarily modified without being detected in Trustee 0.3%