Security
فارسی
All products

github.com/moby/moby

Go · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Docker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567 · GHSA-X86F-5XW2-FM2RVersion ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Moby has an Off-by-one error in its plugin privilege validationCVE-2026-33997 · GHSA-PXQ6-2PRW-CHJ9Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
NULL Pointer Dereference on moby image historyCVE-2024-36620 · GHSA-Q59J-VV4J-V33CVersion ranges need review. github.com/moby/mobyMulticluster Engine for Kubernetes/multicluster-engine-assisted-service-8-container GoRed Hat Medium Fix reported
Moby Race Condition vulnerabilityCVE-2024-36623 · GHSA-GH5C-3H97-2F3QVersion ranges need review. github.com/moby/moby Go High Fix reported
Moby Race Condition vulnerabilityCVE-2024-36621 · GHSA-2MJ3-VFVX-FC43Version ranges need review. github.com/moby/moby Go High Fix reported
Authz zero length regressionCVE-2024-41110 · GHSA-V23V-6JW2-98FQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Critical Fix reported
Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsingGHSA-XMMX-7JPF-FX42 · GO-2024-2914Version ranges need review. github.com/docker/dockergithub.com/moby/moby Go Medium Fix reported
`docker cp` allows unexpected chmod of host files in Moby Docker EngineCVE-2021-41089 · GHSA-V994-F8VW-G7J4Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Low Fix reported
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
moby Access to remapped root allows privilege escalation to real rootCVE-2021-21284 · GHSA-7452-XQPJ-6RPC github.com/moby/mobyRed Hat Enterprise Linux 7/docker GoRed Hat Medium Fix reported
Path Traversal in Moby builderCVE-2020-27534 · GHSA-6HWG-W5JG-9C6X github.com/docker/dockergithub.com/moby/moby Go Medium Fix reported
moby docker daemon crash during image pull of malicious imageCVE-2021-21285 · GHSA-6FJ5-M822-RQX8 github.com/moby/mobyRed Hat Enterprise Linux 7/docker GoRed Hat Medium Fix reported
Moby (Docker Engine) Insufficiently restricted permissions on data directoryCVE-2021-41091 · GHSA-3FWX-PJGW-3558Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Classic builder cache poisoningCVE-2024-24557 · GHSA-XW73-RW38-6VJCVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Moby Docker cp broken with debian containersCVE-2019-14271 · GHSA-V2CV-WWXQ-QQ97Version ranges need review. github.com/docker/dockergithub.com/moby/moby Go Critical Fix reported
Moby has AuthZ plugin bypass when provided oversized request bodiesCVE-2026-34040 · GHSA-X744-4WPC-V9H2Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)CVE-2017-16539 · GHSA-VFJC-2QCW-J95J github.com/moby/moby Go Medium Fix reported