VulertSecurity VulertSecurity

Vulnerability Database · Search

github.com/docker/docker vulnerabilities — 62 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated CVE-2026-41568: Docker Race Condition in docker cp Allows Arbitrary File Creation github.com/docker/docker Go 25 Jun 2026 No fix published
Unrated CVE-2026-41567: Docker Container Binary Execution Vulnerability in github.com/docker/docker github.com/docker/docker Go 25 Jun 2026 No fix published
Unrated CVE-2026-42306: Docker Race Condition in docker cp Allows Bind Mount Redirection to Host Path github.com/docker/docker Go 25 Jun 2026 No fix published
7.2 high CVE-2026-42306: Docker Race Condition in docker cp Allows Bind Mount Redirection to Host Path github.com/docker/docker Go 18 May 2026 No fix published
6.1 medium CVE-2026-41568: Docker Race Condition Vulnerability Allows Arbitrary File Creation on Host github.com/docker/docker Go 18 May 2026 No fix published
Unrated CVE-2026-33997: Off-by-One Error in Plugin Privilege Validation in Docker github.com/docker/docker Go 02 Apr 2026 No fix published
Unrated CVE-2026-34040: Moby AuthZ Plugin Bypass Due to Oversized Request Bodies github.com/docker/docker Go 02 Apr 2026 No fix published
6.8 medium CVE-2026-33997: Moby Plugin Privilege Validation Bypass Vulnerability github.com/docker/docker Go 27 Mar 2026 No fix published
Unrated CVE-2025-54410: github.com/docker/docker - Moby firewalld Reload Vulnerability github.com/docker/docker Go 11 Aug 2025 28.0.0+incompatible
Unrated CVE-2025-54388: Remote Access Vulnerability in github.com/docker/docker due to Moby Firewalld Reload github.com/docker/docker Go 11 Aug 2025 28.3.3+incompatible
3.3 low CVE-2025-54410: Docker Engine Vulnerability Allows Container Network Isolation Bypass github.com/docker/docker Go 29 Jul 2025 No fix published
5.1 medium CVE-2025-54388: Moby Docker Engine Vulnerability Allows Remote Access to Container Ports github.com/docker/docker Go 29 Jul 2025 28.3.3
Unrated Container Path Leakage Vulnerability in github.com/docker/docker github.com/docker/docker Go 21 Aug 2024 20.10.20+incompatible
Unrated CVE-2022-2989: Docker supplementary group permissions bypass in github.com/docker/docker github.com/docker/docker Go 21 Aug 2024 20.10.18+incompatible
Unrated Symlink Attack in Libcontainer and Docker Engine github.com/docker/docker Go 21 Aug 2024 1.6.1
Unrated CVE-2015-3631: Arbitrary File Override in Docker Engine github.com/docker/docker Go 21 Aug 2024 1.6.1
Unrated Arbitrary File Write in Libcontainer in github.com/docker/docker github.com/docker/docker Go 21 Aug 2024 1.6.1
Unrated CVE-2014-3499: Privilege Escalation in Docker github.com/docker/docker Go 21 Aug 2024 1.0.1
Unrated CVE-2014-9356: Path Traversal in Docker in github.com/docker/docker github.com/docker/docker Go 21 Aug 2024 1.3.3
Unrated Directory Traversal Vulnerability in Docker github.com/docker/docker Go 21 Aug 2024 1.3.2
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.