Security
فارسی
All products

github.com/docker/docker

Go · Package
36 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Docker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567 · GHSA-X86F-5XW2-FM2RVersion ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Moby has an Off-by-one error in its plugin privilege validationCVE-2026-33997 · GHSA-PXQ6-2PRW-CHJ9Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
Moby firewalld reload makes published container ports accessible from remote hosts CVE-2025-54388 · GHSA-X4RX-4GW3-53P4Version ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Moby firewalld reload removes bridge network isolationCVE-2025-54410 · GHSA-4VQ8-7JFC-9CVPVersion ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Low Fix reported
Authz zero length regressionCVE-2024-41110 · GHSA-V23V-6JW2-98FQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Critical Fix reported
Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsingGHSA-XMMX-7JPF-FX42 · GO-2024-2914Version ranges need review. github.com/docker/dockergithub.com/moby/moby Go Medium Fix reported
`docker cp` allows unexpected chmod of host files in Moby Docker EngineCVE-2021-41089 · GHSA-V994-F8VW-G7J4Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Low Fix reported
IPv6 enabled on IPv4-only network interfacesCVE-2024-32473 · GHSA-X84C-P2G9-RQV9Version ranges need review. github.com/docker/docker Go Medium Fix reported
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Moby's external DNS requests from 'internal' networks could lead to data exfiltrationCVE-2024-29018 · GHSA-MQ39-4GV4-MVPXVersion ranges need review. github.com/docker/docker Go Medium Fix reported
Docker Authentication BypassCVE-2018-12608 · GHSA-QRQR-3X5J-2XW9 github.com/docker/dockerOpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8 GoRed Hat High Fix reported
Path Traversal in Moby builderCVE-2020-27534 · GHSA-6HWG-W5JG-9C6X github.com/docker/dockergithub.com/moby/moby Go Medium Fix reported
Moby (Docker Engine) Insufficiently restricted permissions on data directoryCVE-2021-41091 · GHSA-3FWX-PJGW-3558Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Classic builder cache poisoningCVE-2024-24557 · GHSA-XW73-RW38-6VJCVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
/sys/devices/virtual/powercap accessible by default to containersGHSA-JQ35-85CJ-FJ4P github.com/docker/docker Go Medium Fix reported
Docker Swarm encrypted overlay network with a single endpoint is unauthenticatedCVE-2023-28842 · GHSA-6WRF-MXFJ-PF5PVersion ranges need review. github.com/docker/docker Go Medium Fix reported
Docker Swarm encrypted overlay network traffic may be unencryptedCVE-2023-28841 · GHSA-33PG-M6JH-5237Version ranges need review. github.com/docker/docker Go Medium Fix reported
Docker Swarm encrypted overlay network may be unauthenticatedCVE-2023-28840 · GHSA-232P-VWFF-86MPVersion ranges need review. github.com/docker/docker Go High Fix reported