Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5668
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files 25 Jun
  • Fix available
GO-2026-5746
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker 25 Jun
  • Fix available
GO-2026-5617
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection 25 Jun
  • Fix available
GHSA-rg2x-37c3-w2rh
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Docker: Race condition in docker cp allows bind mount redirection to host path 18 May
  • Fix available
  • Severity - 7.2 (High)
GHSA-vp62-88p7-qqf5
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 18 May
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-x86f-5xw2-fm2r
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Docker: `PUT /containers/{id}/archive` executes container binary on the host 18 May
  • Fix available
  • Severity - 7.2 (High)
GO-2026-4883
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker 02 Apr
  • Fix available
GO-2026-4887
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker 02 Apr
  • Fix available
GHSA-x744-4wpc-v9h2
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Moby has AuthZ plugin bypass when provided oversized request bodies 27 Mar
  • Fix available
  • Severity - 8.8 (High)
GHSA-pxq6-2prw-chj9
  • Go/github.com/docker/docker
  • Go/github.com/moby/moby
  • Go/github.com/moby/moby/v2
Moby has an Off-by-one error in its plugin privilege validation 27 Mar
  • Fix available
  • Severity - 6.8 (Medium)
GO-2024-3311
  • Go/github.com/moby/moby
NULL Pointer Dereference on moby image history in github.com/moby/moby 09 Dec 2024
  • Fix available
GO-2024-3304
  • Go/github.com/moby/moby
Moby Race Condition vulnerability in github.com/moby/moby 04 Dec 2024
  • Fix available
GO-2024-3305
  • Go/github.com/moby/moby
Moby Race Condition vulnerability in github.com/moby/moby 04 Dec 2024
  • Fix available
GHSA-2mj3-vfvx-fc43
  • Go/github.com/moby/moby
Moby Race Condition vulnerability 29 Nov 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-gh5c-3h97-2f3q
  • Go/github.com/moby/moby
Moby Race Condition vulnerability 29 Nov 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-q59j-vv4j-v33c
  • Go/github.com/moby/moby
NULL Pointer Dereference on moby image history 29 Nov 2024
  • Fix available
  • Severity - 5.7 (Medium)