Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5668
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files 25 Jun
  • Fix available
GO-2026-5746
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker 25 Jun
  • Fix available
GO-2026-5617
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection 25 Jun
  • Fix available
GHSA-rg2x-37c3-w2rh
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Docker: Race condition in docker cp allows bind mount redirection to host path 18 May
  • Fix available
  • Severity - 7.2 (High)
GHSA-vp62-88p7-qqf5
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 18 May
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-x86f-5xw2-fm2r
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Docker: `PUT /containers/{id}/archive` executes container binary on the host 18 May
  • Fix available
  • Severity - 7.2 (High)
GO-2026-4883
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker 02 Apr
  • Fix available
GO-2026-4887
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker 02 Apr
  • Fix available
GHSA-pxq6-2prw-chj9
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
 Moby has an Off-by-one error in its plugin privilege validation 27 Mar
  • Fix available
  • Severity - 6.8 (Medium)
GO-2025-3829
  • Go/github.com/docker/docker
 Moby firewalld reload removes bridge network isolation in github.com/docker/docker 11 Aug 2025
  • Fix available
GO-2025-3830
  • Go/github.com/docker/docker
 Moby firewalld reload makes published container ports accessible from remote hosts in github.com/docker/docker 11 Aug 2025
  • Fix available
GHSA-4vq8-7jfc-9cvp
  • Go/github.com/docker/docker
 Moby firewalld reload removes bridge network isolation 29 Jul 2025
  • Fix available
  • Severity - 3.3 (Low)
GHSA-x4rx-4gw3-53p4
  • Go/github.com/docker/docker
 Moby firewalld reload makes published container ports accessible from remote hosts 29 Jul 2025
  • Fix available
  • Severity - 5.1 (Medium)
GO-2022-1107
  • Go/github.com/docker/docker
 Container build can leak any path on the host into the container in github.com/docker/docker 21 Aug 2024
  • Fix available
GO-2022-0985
  • Go/github.com/docker/docker
 Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker 21 Aug 2024
  • Fix available
GO-2022-0647
  • Go/github.com/docker/docker
 Arbitrary File Write in Libcontainer in github.com/docker/docker 21 Aug 2024
  • Fix available
Load more...