github.com/docker/docker vulnerabilities
CVEs whose affected-version data names the github.com/docker/docker package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2021-41089Low· 2.8`docker cp` allows unexpected chmod of host files in Moby Docker Engine
`docker cp` allows unexpected chmod of host files in Moby Docker Engine
▾ Sunlitdocker · github.com/docker/dockerEPSS 0.29%via OSV
CVE-2021-41091Medium· 5.9PoCMoby (Docker Engine) Insufficiently restricted permissions on data directory
Moby (Docker Engine) Insufficiently restricted permissions on data directory
▾ Twilightmoby · github.com/moby/mobyEPSS 2.8%via OSV
CVE-2014-6407High· 7.3Arbitrary Code Execution in Docker
Arbitrary Code Execution in Docker
▾ Twilightdocker · github.com/docker/dockerEPSS 4.9%via OSV
CVE-2020-27534Medium· 5.3moby/buildkit: calls os.OpenFile with a potentially unsafe qemu-check temporary pathname (CVE-2020-27534)
A flaw was found in moby. Moby buildkit calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
▾ SunlitRed Hat · github.com/moby/mobyEPSS 1.8%via CSAF