DHI-xpg2-qncj-4fwr-xji4

See a problem?
Please try reporting it to the source first.
Source
https://scout.docker.com/v/DHI-xpg2-qncj-4fwr-xji4
Import Source
https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json
JSON Data
https://api.test.osv.dev/v1/vulns/DHI-xpg2-qncj-4fwr-xji4
Upstream
  • CVE-2026-33818
Published
2026-11-10T22:09:39Z
Modified
2026-11-10T22:15:02Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Details

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

References

Affected packages

Docker Hardened Images:Alpine:3.23
tailscale-dev

Package

Name
tailscale-dev
Purl
pkg:apk/dhi/tailscale-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-fips-dev

Package

Name
tailscale-fips-dev
Purl
pkg:apk/dhi/tailscale-fips-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-fips

Package

Name
tailscale-fips
Purl
pkg:apk/dhi/tailscale-fips

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-nameserver-dev

Package

Name
tailscale-k8s-nameserver-dev
Purl
pkg:apk/dhi/tailscale-k8s-nameserver-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-nameserver-fips-dev

Package

Name
tailscale-k8s-nameserver-fips-dev
Purl
pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-nameserver-fips

Package

Name
tailscale-k8s-nameserver-fips
Purl
pkg:apk/dhi/tailscale-k8s-nameserver-fips

Affected ranges

Affected versions

1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-nameserver

Package

Name
tailscale-k8s-nameserver
Purl
pkg:apk/dhi/tailscale-k8s-nameserver

Affected ranges

Affected versions

1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-operator-dev

Package

Name
tailscale-k8s-operator-dev
Purl
pkg:apk/dhi/tailscale-k8s-operator-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-operator-fips-dev

Package

Name
tailscale-k8s-operator-fips-dev
Purl
pkg:apk/dhi/tailscale-k8s-operator-fips-dev

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-operator-fips

Package

Name
tailscale-k8s-operator-fips
Purl
pkg:apk/dhi/tailscale-k8s-operator-fips

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale-k8s-operator

Package

Name
tailscale-k8s-operator
Purl
pkg:apk/dhi/tailscale-k8s-operator

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"
tailscale

Package

Name
tailscale
Purl
pkg:apk/dhi/tailscale

Affected ranges

Affected versions

1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1

Database specific

owner_kind 
"HSP"
source 
"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-xpg2-qncj-4fwr-xji4.json"