kapsl Index
Docs Releases

bison

1 tool · 1 release line

Generate a parser in C, C++ or Java from a grammar. Every tool here carries the same sandbox boundary.

kapsl bison
Source ↗ Registry ↗

Release lines we maintain · the project decides these

findings shown are the whole project at that line

Tag Resolves to Lifecycle Updated Findings What the tag promises
  • stable — floats, carries security updates
  • unstable — tracks pre-releases, may break
  • eol — frozen, upstream is done

Tools in this project · pick one to inspect

all share one boundary

Tool Capabilities Seccomp Findings Image Description
showing bison from bison@latest → 3.8.2 stable

Findings

M2

identical on amd64, arm64 — one table describes both

CVE Sev CVSS Affects Description
CVE-2026-56389 ↗ M 6.8 bison GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables.
CVE-2026-56390 ↗ M 4.6 bison GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options.

These are the findings of bison, which ships every tool in this project. kapsl reports and gates; it never edits an image to clear a finding.

Composition

default + m4
runtime none — self-contained
composes m4

Some tools are only useful composed: a pip-installed CLI needs python as its runtime, bash pulls in coreutils. kapsl resolves that for you — -e git,python:flake8 composes explicitly.

Image

image ghcr.io/kapsl-sh/bison:3.8.2
digest
platforms
size 1 MB unpacked · 1 layer
base scratch
signed cosign · verified
last scan

Sandbox boundary

bison

capabilities

rw

Filled is granted to every invocation; the rest need --cap at the point of use.

seccomp tier

per tool

default

The syscall filter applied to this tool's entry point. Tools sharing an image do not share a tier.

dotfiles mapped in

read-only unless noted

none

env passed through

none

none

Nothing else crosses in. No AWS_*, no SSH_AUTH_SOCK unless you ask.

env set by kapsl

2 set

BISON_PKGDATADIRM4

per-subcommand

no overrides

Every invocation gets the same boundary. Where a tool needs more for one subcommand only, kapsl scopes it there rather than granting it everywhere.

Provenance

sbom amd64 ↗ arm64 ↗
attestation amd64 ↗ arm64 ↗
scan report amd64 ↗ arm64 ↗ grype ·
vex amd64 ↗ arm64 ↗

Every image ships a full SBOM and a signed build attestation. Nothing here is a claim you have to take on trust.

2 findings across this project at latest. Counted once per advisory across every image the project builds.