GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

  GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

  GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

  GO-2026-5617: Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

  GO-2026-5668: Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker

  GO-2026-5746: Docker: `PUT /containers/{id}/archive` executes container binary on the host in github.com/docker/docker