caps

Feb 6, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 27, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 17, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 12, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 11, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 4, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 5, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Nov 23, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Nov 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 16, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 14, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 12, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 7, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 26, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 25, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 6, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 4, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Sep 27, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 18, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 17, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 12, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 28, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 26, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 13, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 1, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jun 17, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jun 15, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

May 28, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Apr 26, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Apr 26, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Apr 13, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Changes in this version

+ func GetAllCapabilities() []string — darwin/amd64, js/wasm, linux/amd64

+ func TweakCapabilities(basics, adds, drops []string) ([]string, error) — darwin/amd64, js/wasm, linux/amd64

+ type Capabilities []*CapabilityMapping — darwin/amd64, js/wasm, linux/amd64

+ type CapabilityMapping struct — darwin/amd64, js/wasm, linux/amd64

+ Key string

+ Value capability.Cap

+ func GetCapability(key string) *CapabilityMapping

+ func (c *CapabilityMapping) String() string

Apr 11, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Apr 7, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Apr 1, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Mar 25, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Mar 23, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker