https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-5843.htmlhttps://patchthecve.com/cve/CVE-2026-5843.htmlThu, 23 Jul 2026 11:10:00 +0000HIGH 8.2: The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json specifies a model_file pointing to a Python fihttps://patchthecve.com/cve/CVE-2026-5817.htmlhttps://patchthecve.com/cve/CVE-2026-5817.htmlThu, 23 Jul 2026 11:10:00 +0000HIGH 8.2: The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included in any model pulled https://patchthecve.com/cve/CVE-2026-6406.htmlhttps://patchthecve.com/cve/CVE-2026-6406.htmlThu, 23 Jul 2026 16:10:00 +0000HIGH 8.8: The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker soc