Affected by GO-2026-4883
and 4 other vulnerabilities
GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker
GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker
GO-2026-5617: Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker
GO-2026-5668: Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker
GO-2026-5746: Docker: `PUT /containers/{id}/archive` executes container binary on the host in github.com/docker/docker
package
Version:
v28.2.0-rc.2+incompatible
Opens a new window with list of versions in this module.
Published: May 22, 2025
License: Apache-2.0
Opens a new window with license information.
Imports: 7
Opens a new window with list of imports.
Imported by: 242
Opens a new window with list of known importers.
Documentation
¶
func DefaultCapabilities() []string
DefaultCapabilities returns a Linux kernel default capabilities
func GetAllCapabilities() []string
GetAllCapabilities returns all capabilities that are available in the current
environment.
NormalizeLegacyCapabilities normalizes, and validates CapAdd/CapDrop capabilities
by upper-casing them, and adding a CAP_ prefix (if not yet present).
This function also accepts the "ALL" magic-value, that's used by CapAdd/CapDrop.
TweakCapabilities tweaks capabilities by adding, dropping, or overriding
capabilities in the basics capabilities list.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.