utils

Feb 6, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 27, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 17, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 12, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 11, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 4, 2017 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 5, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 23, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 11, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 16, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 14, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 12, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 7, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 26, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 25, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 11, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 6, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 4, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Sep 27, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 18, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 17, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 12, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 28, 2016 GO-2022-0390 +13 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 26, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 13, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 1, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 17, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 15, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

May 28, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 26, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 26, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 13, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func IsProcessAlive(pid int) bool — linux/amd64, windows/amd64

+ func KillProcess(pid int) — linux/amd64, windows/amd64

Apr 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 7, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 1, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 25, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 23, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 9, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 8, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 20, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 20, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 10, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 4, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ var RestrictedVolumeNamePattern = regexp.MustCompile(`^` + RestrictedNameChars + `+$`)

+ func DisableDebug()

+ func EnableDebug()

+ func IsDebugEnabled() bool

Feb 3, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 2, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 27, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 15, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 12, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 3, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ const RestrictedNameChars

+ var RestrictedNamePattern = regexp.MustCompile(`^/?` + RestrictedNameChars + `+$`)

+ func GetErrorMessage(err error) string

+ func IsTimeout(err error) bool

Nov 3, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 31, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 28, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 22, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 14, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Sep 3, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 13, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 11, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 7, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 4, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 25, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 9, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 8, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 2, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 18, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func ConfigureTCPTransport(tr *http.Transport, proto, addr string)

+ func ExperimentalBuild() bool

+ func GitClone(remoteURL string) (string, error)

Jun 16, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 16, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 12, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 4, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

May 28, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

May 7, 2015 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 16, 2015 GO-2022-0390 +14 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0638: Information Exposure in Docker Engine in github.com/docker/docker

  GO-2022-0647: Arbitrary File Write in Libcontainer in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func DigestReference(ref string) bool

+ func ImageReference(repo, ref string) string

type StreamFormatter

+ func (sf *StreamFormatter) FormatProg(id, action string, p interface{}) []byte

+ type WriteCounter struct

+ Count int64

+ Writer io.Writer

+ func NewWriteCounter(w io.Writer) *WriteCounter

+ func (wc *WriteCounter) Write(p []byte) (count int, err error)

Apr 15, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 13, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 6, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Apr 2, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 31, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 25, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Mar 23, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 4, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Feb 3, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 28, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jan 22, 2015 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 15, 2014 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 11, 2014 GO-2022-0390 +12 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 24, 2014 GO-2022-0390 +14 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 15, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0625: Access Restriction Bypass in Docker in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func RemoveLocalDns(resolvConf []byte) []byte

Jul 9, 2014 GO-2022-0390 +17 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 3, 2014 GO-2022-0390 +17 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 6, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func NewTimeoutConn(conn net.Conn, timeout time.Duration) net.Conn

+ func ResumableRequestReader(c *http.Client, r *http.Request, maxfail uint32, totalsize int64) io.ReadCloser

+ func ValidateContextDirectory(srcPath string) error

+ type TimeoutConn struct

+ func (c *TimeoutConn) Read(b []byte) (int, error)

type TruncIndex

+ func (idx *TruncIndex) AddWithoutSuffixarrayUpdate(id string) error

+ func (idx *TruncIndex) UpdateSuffixarray()

May 7, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func WriteLog(src io.Reader, dst io.WriteCloser, format string) error

type JSONLog

+ func (jl *JSONLog) Format(format string) (string, error)

+ type LogFormatter struct

Mar 10, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func ReadSymlinkedDirectory(path string) (string, error)

+ func ReplaceOrAppendEnvValues(defaults, overrides []string) []string

+ type CheckSum struct

+ Hash hash.Hash

+ func (cs *CheckSum) Read(buf []byte) (int, error)

+ func (cs *CheckSum) Sum() string

Jan 9, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

type TarSum

+ DisableCompression bool

Jan 8, 2014 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Dec 6, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ type HTTPAuthDecorator struct

+ func (self *HTTPAuthDecorator) ChangeRequest(req *http.Request) (*http.Request, error)

type HTTPRequestDecorator

+ func NewHTTPAuthDecorator(login, password string) HTTPRequestDecorator

type HTTPRequestFactory

+ func (self *HTTPRequestFactory) AddDecorator(d ...HTTPRequestDecorator)

type JSONMessage

+ ProgressMessage string

+ Stream string

+ type JSONProgress struct

+ Current int

+ Start int64

+ Total int

+ func (p *JSONProgress) String() string

type StatusError

+ StatusCode int

type StreamFormatter

+ func (sf *StreamFormatter) FormatStream(str string) []byte

Nov 26, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func CopyFile(src, dst string) (int64, error)

+ func TreeSize(dir string) (size int64, err error)

Nov 20, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 19, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 7, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Oct 2, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Nov 6, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func CreatePidFile(pidfile string) error

+ func GetNameserversAsCIDR(resolvConf []byte) []string

+ func RandomString() string

+ func RemovePidFile(pidfile string)

type WriteFlusher

+ func (wf *WriteFlusher) Flush()

Oct 30, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ var IAMSTATIC bool

+ var INITSHA1 string

+ func CatchAll(sigc chan os.Signal) — darwin/amd64, linux/amd64

+ func DockerInitPath() string

+ func PartParser(template, data string) (map[string]string, error)

+ func StopCatch(sigc chan os.Signal)

+ type ListOpts []string

+ func (opts *ListOpts) Set(value string) error

+ func (opts *ListOpts) String() string

Oct 17, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ const StdWriterFdIndex

+ const StdWriterPrefixLen

+ const StdWriterSizeIndex

+ var ErrInvalidStdHeader = errors.New("Unrecognized input header")

+ func Errorf(format string, a ...interface{})

+ func IsClosedError(err error) bool

+ func StdCopy(dstout, dsterr io.Writer, src io.Reader) (written int64, err error)

+ type StdType [StdWriterPrefixLen]byte

+ var Stderr StdType = StdType{ ... }

+ var Stdin StdType = StdType{ ... }

+ var Stdout StdType = StdType{ ... }

+ type StdWriter struct

+ func NewStdWriter(w io.Writer, t StdType) *StdWriter

+ func (w *StdWriter) Write(buf []byte) (n int, err error)

Sep 23, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Sep 17, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func StripComments(input []byte, commentMarker []byte) []byte

+ type DependencyGraph struct

+ func NewDependencyGraph() DependencyGraph

+ func (graph *DependencyGraph) AddDependency(node, to string) error

+ func (graph *DependencyGraph) GenerateTraversalMap() ([][]string, error)

+ func (graph *DependencyGraph) NewNode(id string) string

+ type DependencyNode struct

+ func (node *DependencyNode) Degree() int

type KernelVersionInfo

+ func ParseRelease(release string) (*KernelVersionInfo, error)

+ type StatusError struct

+ Status int

+ func (e *StatusError) Error() string

+ type User struct

+ Gid string

+ HomeDir string

+ Name string

+ Uid string

+ Username string

Aug 23, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ type HTTPMetaHeadersDecorator struct

+ Headers map[string][]string

+ func (self *HTTPMetaHeadersDecorator) ChangeRequest(req *http.Request) (newReq *http.Request, err error)

Aug 22, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func DisplayJSONMessagesStream(in io.Reader, out io.Writer) error

+ func GetReleaseVersion() string

+ func GetResolvConf() ([]byte, error)

+ func NewHTTPRequestError(msg string, res *http.Response) error

+ type HTTPRequestDecorator interface

+ ChangeRequest func(req *http.Request) (newReq *http.Request, err error)

+ func NewHTTPUserAgentDecorator(versions ...VersionInfo) HTTPRequestDecorator

+ type HTTPRequestFactory struct

+ func NewHTTPRequestFactory(d ...HTTPRequestDecorator) *HTTPRequestFactory

+ func (self *HTTPRequestFactory) NewRequest(method, urlStr string, body io.Reader, d ...HTTPRequestDecorator) (*http.Request, error)

+ type HTTPUserAgentDecorator struct

+ func (self *HTTPUserAgentDecorator) ChangeRequest(req *http.Request) (newReq *http.Request, err error)

+ type JSONError struct

+ Code int

+ Message string

+ func (e *JSONError) Error() string

type JSONMessage

+ ErrorMessage string

+ From string

+ type TarSum struct

+ func (ts *TarSum) Read(buf []byte) (int, error)

+ func (ts *TarSum) Sum(extra []byte) string

+ type VersionInfo interface

+ Name func() string

+ Version func() string

Aug 13, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Aug 9, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jul 31, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ type JSONLog struct

+ Created time.Time

+ Log string

+ Stream string

type JSONMessage

+ ID string

+ Time int64

+ func (jm *JSONMessage) Display(out io.Writer) error

+ type StreamWriter struct

Jul 18, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func ParseRepositoryTag(repos string) (string, string)

+ func UserLookup(uid string) (*user.User, error)

Jul 2, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 30, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 22, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 22, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func IsGIT(str string) bool

+ func IsURL(str string) bool

Jun 20, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 20, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func ParseHost(host string, port int, addr string) string

Jun 18, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Jun 17, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func CheckLocalDns() bool

+ func HumanSize(size int64) string

+ func TruncateID(id string) string

+ type JSONMessage struct

+ Error string

+ Progress string

+ Status string

Jun 3, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ type JsonMessage struct

+ Error string

+ Progress string

+ Status string

+ type StreamFormatter struct

+ func NewStreamFormatter(json bool) *StreamFormatter

+ func (sf *StreamFormatter) FormatError(err error) []byte

+ func (sf *StreamFormatter) FormatProgress(action, str string) []byte

+ func (sf *StreamFormatter) FormatStatus(format string, a ...interface{}) []byte

+ func (sf *StreamFormatter) Used() bool

May 31, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func CopyDirectory(source, dest string) error

+ func FormatProgress(str string, json bool) string

+ func FormatStatus(str string, json bool) string

May 23, 2013 GO-2022-0390 +18 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0630: Arbitrary Code Execution in Docker in github.com/docker/docker

  GO-2022-0636: Man-in-the-Middle (MitM) in github.com/docker/docker

  GO-2022-0640: Arbitrary Code Execution in github.com/docker/docker

  GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

  GO-2022-0705: Directory Traversal in Docker in github.com/docker/docker

  GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

  GO-2022-0751: Path Traversal in Docker in github.com/docker/docker

  GO-2022-0752: Privilege Escalation in Docker in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Changes in this version

+ func CompareKernelVersion(a, b *KernelVersionInfo) int

+ func CopyEscapable(dst io.Writer, src io.ReadCloser) (written int64, err error)

+ func Debugf(format string, a ...interface{})

+ func Download(url string, stderr io.Writer) (*http.Response, error)

+ func FindCgroupMountpoint(cgroupType string) (string, error)

+ func GetTotalUsedFds() int

+ func Go(f func() error) chan error

+ func HashData(src io.Reader) (string, error)

+ func HumanDuration(d time.Duration) string

+ func NewBufReader(r io.Reader) *bufReader

+ func NopWriteCloser(w io.Writer) io.WriteCloser

+ func ProgressReader(r io.ReadCloser, size int, output io.Writer, template string) *progressReader

+ func SelfPath() string

+ func Trunc(s string, maxlen int) string

+ func TruncateId(id string) string

+ type KernelVersionInfo struct

+ Flavor string

+ Kernel int

+ Major int

+ Minor int

+ func GetKernelVersion() (*KernelVersionInfo, error)

+ func (k *KernelVersionInfo) String() string

+ type NopFlusher struct

+ func (f *NopFlusher) Flush()

+ type NopWriter struct

+ func (w *NopWriter) Write(buf []byte) (int, error)

+ type TruncIndex struct

+ func NewTruncIndex() *TruncIndex

+ func (idx *TruncIndex) Add(id string) error

+ func (idx *TruncIndex) Delete(id string) error

+ func (idx *TruncIndex) Get(s string) (string, error)

+ type Utsname struct — darwin/amd64

+ Release [65]byte

+ type Utsname syscall.Utsname — linux/amd64

+ type WriteBroadcaster struct

+ func NewWriteBroadcaster() *WriteBroadcaster

+ func (w *WriteBroadcaster) AddWriter(writer io.WriteCloser)

+ func (w *WriteBroadcaster) CloseWriters() error

+ func (w *WriteBroadcaster) RemoveWriter(writer io.WriteCloser)

+ func (w *WriteBroadcaster) Write(p []byte) (n int, err error)

+ type WriteFlusher struct

+ func NewWriteFlusher(w io.Writer) *WriteFlusher

+ func (wf *WriteFlusher) Write(b []byte) (n int, err error)