`github.com/docker/docker`

Ecosystem:
go

Package URL:
pkg:golang/github.com/docker/docker

Total PRs:
5,287 Dependabot PRs

Latest PR:
about 19 hours ago

Unique Repositories:
1,748 repositories

Unique Repos (30 days):
32 repositories

Security Advisories

Moby (Docker Engine) started with non-empty inheritable Linux process capabilities

GHSA-2mm7-x5h6-5pvq CVE-2022-24769 MODERATE published over 1 year ago • updated 2 days ago

### Impact A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities...

Moby firewalld reload makes published container ports accessible from remote hosts

GHSA-x4rx-4gw3-53p4 CVE-2025-54388 MODERATE published 5 months ago • updated about 1 hour ago

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various o...

Arbitrary Code Execution

GHSA-997c-fj8j-rq5h CVE-2014-9357 HIGH published almost 4 years ago • updated about 1 month ago

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA...

Moby Docker cp broken with debian containers

GHSA-v2cv-wwxq-qq97 CVE-2019-14271 CRITICAL published over 3 years ago • updated 29 days ago

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically load...

Privilege Escalation in Docker

GHSA-wxj3-qwv4-cvfm CVE-2014-3499 HIGH published almost 4 years ago • updated 24 days ago

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecifi...

View all 29 advisories

Recent PRs

Bump github.com/docker/docker from 0.7.3-0.20190327010347-be7ac8be2ae0 to 25.0.13+incompatible

kmodules/kubectl #2

0.7.3-0.20190327010347-be7ac8be2ae0 → 25.0.13+incompatible Major PR

Open about 19 hours ago 1 comment

Bump github.com/docker/docker from 26.1.5+incompatible to 28.0.0+incompatible in /hack/tools

kluster-api/cluster-api-provider-aws #7

26.1.5+incompatible → 28.0.0+incompatible Major PR

Open about 19 hours ago 1 comment

chore(deps): bump github.com/docker/docker from 27.2.1+incompatible to 28.0.0+incompatible

kluster-api/kamaji #2

27.2.1+incompatible → 28.0.0+incompatible Major PR

Open about 19 hours ago 1 comment

Bump github.com/docker/docker from 26.1.3+incompatible to 28.0.0+incompatible in /test

kluster-api/cluster-api #2

26.1.3+incompatible → 28.0.0+incompatible Major PR

Open about 19 hours ago 1 comment

Bump github.com/docker/docker from 23.0.5+incompatible to 25.0.13+incompatible

appscodelabs/registry-redirect #4

23.0.5+incompatible → 25.0.13+incompatible Major PR

Open about 19 hours ago 1 comment

fix(deps): bump the external group across 1 directory with 21 updates

opentdf/platform #2980

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Open 2 days ago 1 comment

chore: bump the engine group across 2 directories with 52 updates

TomChv/dagger #516

28.4.0+incompatible → 28.5.2+incompatible Minor PR

Open 4 days ago 1 comment

build(deps): bump the moby group with 2 updates

apptainer/apptainer #3276

27.5.1+incompatible → 28.5.2+incompatible Major PR

Closed 7 days ago 2 comments

build(deps): bump github.com/docker/docker from 24.0.5+incompatible to 28.5.2+incompatible

pivotal-cf/kiln #596

24.0.5+incompatible → 28.5.2+incompatible Major PR

Closed 7 days ago 2 comments

Bump the go_modules group across 31 directories with 13 updates

naywint3/gitpod #2

25.0.6+incompatible → 25.0.13+incompatible Patch PR

Open 9 days ago 1 comment

chore(deps): bump the go_modules group across 2 directories with 3 updates

gnolang/gno #4982

25.0.6+incompatible → 25.0.13+incompatible Patch PR

Open 10 days ago 2 comments

chore: bump the engine group across 2 directories with 42 updates

shykes/dagger #464

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open 10 days ago 1 comment

Bump the go-minor group across 1 directory with 11 updates

Nuvix-Tech/cli #19

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open 13 days ago 2 comments

chore(deps): bump the go_modules group across 5 directories with 9 updates

liubog2008/tidb-operator #33

25.0.6+incompatible → 25.0.13+incompatible Patch PR

Closed 16 days ago 1 comment

Bump github.com/docker/docker from 24.0.7+incompatible to 25.0.13+incompatible in the go_modules group across 1 directory

victoralfred/devsec_ml_pipeline #14

24.0.7+incompatible → 25.0.13+incompatible Major PR

Open 16 days ago 1 comment

Bump the go-minor group across 1 directory with 10 updates

Nuvix-Tech/cli #18

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 16 days ago 2 comments

Bump github.com/docker/docker from 27.3.1+incompatible to 28.0.0+incompatible in /tools/release/image-mirror

Read-AI-Inc/aws-otel-collector #3

27.3.1+incompatible → 28.0.0+incompatible Major PR

Closed 17 days ago 1 comment

:arrow_up: QD-12983: Bump github.com/docker/docker from 28.4.0+incompatible to 28.5.2+incompatible in /platform

JetBrains/qodana-cli #743

28.4.0+incompatible → 28.5.2+incompatible Minor PR

Closed 17 days ago 2 comments

:arrow_up: QD-12983: Bump github.com/docker/docker from 28.4.0+incompatible to 28.5.2+incompatible in /core

JetBrains/qodana-cli #740

28.4.0+incompatible → 28.5.2+incompatible Minor PR

Open 17 days ago 1 comment

chore(deps): bump the engine group across 2 directories with 39 updates

nludd25/dagger #9

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open 18 days ago 1 comment

chore: bump the engine group across 2 directories with 39 updates

sipsma/dagger #1187

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 18 days ago 2 comments

chore(deps): bump the go-deps group across 1 directory with 19 updates

aws/karpenter-provider-aws #8753

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open 18 days ago 3 comments

Bump github.com/docker/docker from 27.2.0+incompatible to 28.0.0+incompatible in /quickstarttest

GoogleCloudPlatform/opentelemetry-operations-e2e-testing #83

27.2.0+incompatible → 28.0.0+incompatible Major PR

Closed 20 days ago 1 comment

chore(deps): bump the go group across 1 directory with 31 updates

pomerium/pomerium #5969

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 21 days ago 5 comments

chore(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible

kubernetes-sigs/prow #566

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 21 days ago 3 comments

chore(deps): bump github.com/docker/docker from 20.10.21+incompatible to 28.5.2+incompatible

Southclaws/sampctl #537

20.10.21+incompatible → 28.5.2+incompatible Major PR

Closed 24 days ago 1 comment

chore(deps): bump github.com/docker/docker from 28.0.0+incompatible to 28.5.2+incompatible in /src/cli

ready-to-release/eac #11

28.0.0+incompatible → 28.5.2+incompatible Minor PR

Closed 24 days ago 4 comments

chore(deps): bump github.com/docker/docker from 28.0.0+incompatible to 28.5.2+incompatible in /src/specs

ready-to-release/eac #9

28.0.0+incompatible → 28.5.2+incompatible Minor PR

Open 24 days ago 1 comment

chore(deps): bump github.com/docker/docker from 28.0.0+incompatible to 28.5.2+incompatible in /src/commands

ready-to-release/eac #3

28.0.0+incompatible → 28.5.2+incompatible Minor PR

Closed 24 days ago 4 comments

build(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.5.2+incompatible

freifunkMUC/wg-access-server #1021

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Open 24 days ago 1 comment

Bump github.com/docker/docker from 28.0.4+incompatible to 28.5.2+incompatible

meshery/meshery #16529

28.0.4+incompatible → 28.5.2+incompatible Minor PR

Closed 24 days ago 2 comments

chore(deps): bump the go group with 28 updates

pomerium/pomerium #5952

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 24 days ago 1 comment

chore(deps): bump the all-dependencies group with 7 updates

kemingy/envd #122

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 24 days ago 1 comment

chore: bump the engine group across 2 directories with 46 updates

TomChv/dagger #511

28.4.0+incompatible → 28.5.2+incompatible Minor PR

Open 25 days ago 2 comments

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #351

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed 25 days ago 1 comment

build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible

kubri/kubri #802

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 25 days ago 2 comments

build(deps): bump the moby group with 2 updates

apptainer/apptainer #3244

27.5.1+incompatible → 28.5.2+incompatible Major PR

Closed 28 days ago 2 comments

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #350

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed 28 days ago 1 comment

build(deps): bump github.com/docker/docker from 26.1.5+incompatible to 28.0.0+incompatible in /test/resolver-with-timeout

tektoncd/pipeline #9182

26.1.5+incompatible → 28.0.0+incompatible Major PR

Open 29 days ago 2 comments

chore(deps): bump the go-deps group across 1 directory with 37 updates

rudderlabs/rudder-server #6524

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Closed 30 days ago 1 comment

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #349

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the go-deps group across 1 directory with 6 updates

ahouab/Karpenter #58

28.4.0+incompatible → 28.5.2+incompatible Minor PR

Closed about 1 month ago 1 comment

fix(deps): bump the external group across 1 directory with 28 updates

opentdf/platform #2934

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Closed about 1 month ago 6 comments

chore: bump the golang group across 1 directory with 17 updates

AndiDog/skaffold #55

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed about 1 month ago 1 comment

build(deps): Bump the all-go group across 5 directories with 6 updates

evstack/ev-node #2881

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open about 1 month ago 3 comments

chore: bump the engine group across 2 directories with 36 updates

sipsma/dagger #1175

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the go-deps group across 1 directory with 18 updates

aws/karpenter-provider-aws #8729

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Open about 1 month ago 4 comments

Bump github.com/docker/docker from 24.0.2+incompatible to 28.5.2+incompatible in /extension/observer/dockerobserver

coralogix/opentelemetry-collector-contrib #36251

24.0.2+incompatible → 28.5.2+incompatible Major PR

Closed about 1 month ago 3 comments

build(deps): bump the dependabot group across 1 directory with 19 updates

ohsu-comp-bio/funnel #1256

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Open about 1 month ago 1 comment

chore: bump the engine group across 2 directories with 35 updates

sipsma/dagger #1170

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed about 1 month ago 2 comments

Package Details

Name:	`github.com/docker/docker`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/docker/docker`
JSON API:	View JSON

Security Advisories

29

Active advisories

CRITICAL 2

HIGH 8

MODERATE 16

LOW 3

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/docker/docker
Homepage:	https://github.com/docker/docker
Latest Release:	`v28.2.2+incompatible` 7 months ago
Dependent Repos:	40,103
Dependent Packages:	16,935
Ranking:	Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs

PR Status

Open 2,492 (47.1%)

Merged 824 (15.6%)

Closed 1,577 (29.8%)

PR Types

Minor 1,997 (37.8%)

Major 1,960 (37.1%)

Patch 934 (17.7%)