github.com/moby/moby/v2
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap | github.com/docker/dockergithub.com/moby/moby/v2 | GoRed Hat | Medium | Fix reported | |
| Docker: Race condition in docker cp allows bind mount redirection to host path | github.com/docker/dockergithub.com/moby/moby/v2 | GoRed Hat | High | Fix reported | |
| Docker: `PUT /containers/{id}/archive` executes container binary on the host | github.com/docker/dockergithub.com/moby/moby/v2 | GoRed Hat | High | Fix reported | |
| Moby has an Off-by-one error in its plugin privilege validation | github.com/docker/dockergithub.com/moby/moby/v2 | GoRed Hat | Medium | Fix reported | |
| Moby has AuthZ plugin bypass when provided oversized request bodies | github.com/docker/dockergithub.com/moby/moby/v2 | GoRed Hat | High | Fix reported |