`github.com/docker/cli`

Ecosystem:
go

Package URL:
pkg:golang/github.com/docker/cli

Total PRs:
1,791 Dependabot PRs

Latest PR:
about 7 hours ago

Unique Repositories:
344 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

Docker CLI leaks private registry credentials to registry-1.docker.io

GHSA-99pg-grm5-qq3v CVE-2021-41092 MODERATE published about 2 years ago • updated 3 days ago

## Impact A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (...

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

GHSA-p436-gjf2-799p CVE-2025-15558 HIGH published 4 months ago • updated 5 days ago

This issue affects Docker CLI through 29.1.5 ### Impact Docker CLI for Windows searches for plugin binaries in `C:\ProgramData\Docker\cli-plugins...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

shipwright-io/build #1902

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago 1 comment

chore(deps): Bump the production-dependencies group with 3 updates

kubevirt/containerdisks #345

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago 2 comments

go: bump the docker group across 2 directories with 3 updates

inspektor-gadget/inspektor-gadget #4548

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago

build(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

adevinta/vulcan-agent #380

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

operator-framework/operator-registry #1685

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago

chore(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

go-faster/oteldb #692

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago 1 comment

Bump the docker group with 3 updates

dependabot/cli #454

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago

golang: bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

jauderho/dive #201

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago 2 comments

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.2+incompatible

engity-com/bifroest #166

28.2.0+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible in /examples/go

jakecoffman/auto-merge #572

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago

Chore(deps): Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

ktock/buildg #265

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago

build(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

oras-project/oras-go #968

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Open about 1 year ago 1 comment

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

homeport/forklift #196

28.2.1+incompatible → 28.2.2+incompatible Patch PR

Merged about 1 year ago

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible in /examples/go

jakecoffman/auto-merge #565

28.2.0+incompatible → 28.2.1+incompatible Patch PR

Open about 1 year ago

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

engity-com/bifroest #163

28.2.0+incompatible → 28.2.1+incompatible Patch PR

Closed about 1 year ago 1 comment

build(deps): bump the gomod group across 2 directories with 1 update

containerd/stargz-snapshotter #2055

28.2.0+incompatible → 28.2.1+incompatible Patch PR

Open about 1 year ago

build(deps): bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

oras-project/oras-go #965

28.2.0+incompatible → 28.2.1+incompatible Patch PR

Open about 1 year ago 1 comment

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

homeport/forklift #194

28.2.0+incompatible → 28.2.1+incompatible Patch PR

Merged about 1 year ago

chore(deps): bump github.com/docker/cli from 28.0.2+incompatible to 28.0.4+incompatible

hashicorp/nomad #25666

28.0.2+incompatible → 28.0.4+incompatible Patch PR

Closed about 1 year ago 2 comments

build(deps): bump the dependencies group across 1 directory with 8 updates

kunal7070/act-trial #3

28.0.0+incompatible → 28.0.4+incompatible Patch PR

Closed about 1 year ago 1 comment

build(deps): bump the dependencies group across 1 directory with 8 updates

mayurjawalkar1102/Act-practice-Repo #3

28.0.0+incompatible → 28.0.4+incompatible Patch PR

Closed about 1 year ago 1 comment

Bump github.com/docker/cli from 27.4.0+incompatible to 27.4.1+incompatible in /test/new-e2e

DataDog/datadog-agent #32491

27.4.0+incompatible → 27.4.1+incompatible Patch PR

Closed over 1 year ago 3 comments

Package Details

Name:	`github.com/docker/cli`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/docker/cli`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/docker/cli
Homepage:	https://github.com/docker/cli
Latest Release:	`v28.2.2+incompatible` about 1 year ago
Dependent Repos:	16,666
Dependent Packages:	6,302
Ranking:	Top 0.0553% by dependent repos Top 0.0408% by dependent pkgs

PR Status

Open 867 (48.4%)

Merged 203 (11.3%)

Closed 622 (34.7%)

PR Types

Major 407 (22.7%)

Minor 812 (45.4%)

Patch 472 (26.4%)

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Dependabot

`github.com/docker/cli`

Security Advisories

Docker CLI leaks private registry credentials to registry-1.docker.io

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

Recent PRs (filtered by: Patch PRs )

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

chore(deps): Bump the production-dependencies group with 3 updates

go: bump the docker group across 2 directories with 3 updates

build(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

chore(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

Bump the docker group with 3 updates

golang: bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.2+incompatible

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible in /examples/go

Chore(deps): Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

build(deps): bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

Bump github.com/docker/cli from 28.2.1+incompatible to 28.2.2+incompatible

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible in /examples/go

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

build(deps): bump the gomod group across 2 directories with 1 update

build(deps): bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

Bump github.com/docker/cli from 28.2.0+incompatible to 28.2.1+incompatible

chore(deps): bump github.com/docker/cli from 28.0.2+incompatible to 28.0.4+incompatible

build(deps): bump the dependencies group across 1 directory with 8 updates

build(deps): bump the dependencies group across 1 directory with 8 updates

Bump github.com/docker/cli from 27.4.0+incompatible to 27.4.1+incompatible in /test/new-e2e

Package Details

Security Advisories

2

Package Information

PR Status

PR Types