An open index of dependabot pull requests across open source projects.

github.com/docker/docker

Ecosystem:
go
Package URL:
pkg:golang/github.com/docker/docker
Total PRs:
5,469 Dependabot PRs
Latest PR:
2 months ago
Unique Repositories:
1,823 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Information Exposure in Docker Engine
GHSA-8fvr-5rqf-3wwh CVE-2015-3630 HIGH published over 4 years ago • updated 3 days ago
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allo...
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions
GHSA-rc4r-wh2q-q6c4 CVE-2022-36109 MODERATE published almost 4 years ago • updated 12 days ago
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary g...
Privilege Escalation in Docker
GHSA-wxj3-qwv4-cvfm CVE-2014-3499 HIGH published over 4 years ago • updated 6 days ago
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecifi...
Moby's external DNS requests from 'internal' networks could lead to data exfiltration
GHSA-mq39-4gv4-mvpx CVE-2024-29018 MODERATE published over 2 years ago • updated 3 days ago
Moby is an open source container framework originally developed by Docker Inc. as Docker. It is a key component of Docker Engine, Docker Desktop, a...
Path Traversal in Docker
GHSA-vj3f-3286-r4pf CVE-2014-9356 MODERATE published about 5 years ago • updated about 1 month ago
Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism...
Recent PRs
chore(deps): bump the common group across 1 directory with 12 updates

wuxler/ruasec #79

27.5.1+incompatible → 28.5.2+incompatible Major PR
Closed 2 months ago 1 comment
wuxler
chore: bump the engine group across 2 directories with 66 updates

dagger/dagger #12894

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 4 months ago 2 comments
dagger
chore(deps): bump the engine group across 1 directory with 75 updates

aluzzardi/dagger #736

27.1.1+incompatible → 28.5.2+incompatible Major PR
Closed 4 months ago 2 comments
aluzzardi
build(deps): bump the engine group across 1 directory with 74 updates

samalba/dagger #280

26.1.0+incompatible → 28.5.2+incompatible Major PR
Open 4 months ago 1 comment
samalba
fix(deps): bump the external group across 1 directory with 25 updates

opentdf/platform #3202

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 4 months ago 7 comments
opentdf
chore(deps): bump the go_modules group across 12 directories with 5 updates

gnolang/gno #5316

25.0.6+incompatible → 25.0.13+incompatible Patch PR
Open 4 months ago 2 comments
gnolang
chore(deps): bump the go_modules group across 1 directory with 8 updates

Layr-Labs/kona #19

27.5.1+incompatible → 28.0.0+incompatible Major PR
Closed 4 months ago 3 comments
Layr-Labs
chore: bump the engine group across 2 directories with 62 updates

dagger/dagger #12017

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 4 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 61 updates

sipsma/dagger #1247

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 5 months ago 1 comment
sipsma
chore: bump the engine group across 2 directories with 54 updates

dagger/dagger #11987

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 5 months ago 2 comments
dagger
chore: bump the engine group across 2 directories with 48 updates

dagger/dagger #11969

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 5 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 58 updates

sipsma/dagger #1233

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 5 months ago 1 comment
sipsma
chore: bump the engine group across 2 directories with 56 updates

dagger/dagger #11895

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 5 months ago 2 comments
dagger
fix(deps): bump the external group across 1 directory with 23 updates

opentdf/platform #3094

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 5 months ago 5 comments
opentdf
Bump the go_modules group across 35 directories with 8 updates

RemyLoveLogicAI/anyquery #11

27.5.0+incompatible → 28.0.0+incompatible Major PR
Open 5 months ago 5 comments
RemyLoveLogicAI
go: bump the go_modules group across 2 directories with 6 updates

chaos-mesh/chaos-mesh #4835

26.1.5+incompatible → 28.0.0+incompatible Major PR
Closed 5 months ago 2 comments
chaos-mesh
Bump the gomod group with 16 updates

kubernetes-sigs/cri-tools #1994

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open 5 months ago 1 comment
kubernetes-sigs
Package Details
Name: github.com/docker/docker
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/docker/docker
JSON API: View JSON
Security Advisories

33

Active advisories
CRITICAL 2
HIGH 10
MODERATE 18
LOW 3
View All golang Advisories
Package Information
Description:

Repository: https://github.com/docker/docker
Homepage: https://github.com/docker/docker
Latest Release: v28.2.2+incompatible
about 1 year ago
Dependent Repos: 40,103
Dependent Packages: 16,935
Ranking: Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs
PR Status
Open 2,557 (46.8%)
Merged 824 (15.1%)
Closed 1,694 (31.0%)
PR Types
Major 2,065 (37.8%)
Minor 2,025 (37.0%)
Patch 983 (18.0%)