Docker model-runner

• CVE-2026-33990 Critical 9.1 Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) 0.3%
• CVE-2026-28400 High 7.6 Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint 0.3%