Product by Go
Github.com/moby/moby
15 known vulnerabilities in Github.com/moby/moby (Go), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-34040 | Moby: AuthZ plugin bypass with oversized request body | 8.8 | |
| Medium | CVE-2021-21285 | Docker daemon crash during image pull of malicious image | 6.5 | |
| Medium | CVE-2021-41091 | Insufficiently restricted permissions on data directory in Docker Engine | 6.3 | |
| Medium | CVE-2017-16539 | Moby Project Moby: security vulnerability | 5.9 | |
| Medium | CVE-2020-27534 | Docker: security vulnerability | 5.3 | |
| High | CVE-2024-36623 | Moby Project Moby: Race Condition | 8.1 | |
| Medium | CVE-2021-21284 | privilege escalation in Moby | 6.8 | |
| Medium | CVE-2024-36620 | Moby Project Moby: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2024-36621 | Moby Project Moby: Race Condition | 6.5 | |
| High | CVE-2026-33997 | Moby: Off-by-one error in plugin privilege validation | 6.8 | |
| High | CVE-2026-42306 | Moby: Race condition in docker cp allows bind mount redirection to host path | 7.2 | |
| High | CVE-2026-41567 | Docker: `PUT /containers/{id}/archive` executes container binary on the host | 7.2 | |
| Medium | CVE-2026-41568 | Moby: Improper Neutralization of Script in an Error Message Web Page | 6.1 | |
| Medium | CVE-2022-24769 | Default inheritable capabilities for linux container should be empty | 5.9 | |
| High | CVE-2024-24557 | Moby classic builder cache poisoning | 6.9 |