An open index of dependabot pull requests across open source projects.

github.com/docker/docker

Ecosystem:
go
Package URL:
pkg:golang/github.com/docker/docker
Total PRs:
5,465 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,823 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
/sys/devices/virtual/powercap accessible by default to containers
GHSA-jq35-85cj-fj4p MODERATE published over 2 years ago • updated 5 days ago
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware ener...
Moby firewalld reload makes published container ports accessible from remote hosts
GHSA-x4rx-4gw3-53p4 CVE-2025-54388 MODERATE published 10 months ago • updated 7 days ago
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various o...
Authz zero length regression
GHSA-v23v-6jw2-98fq CVE-2024-41110 CRITICAL published almost 2 years ago • updated about 10 hours ago
A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (Au...
Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing
GHSA-xmmx-7jpf-fx42 MODERATE published almost 2 years ago • updated about 10 hours ago
### Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and i...
Arbitrary File Override in Docker Engine
GHSA-v4h8-794j-g8mm CVE-2015-3631 MODERATE published over 4 years ago • updated 7 days ago
Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes ...
Recent PRs
chore: bump the engine group across 2 directories with 66 updates

dagger/dagger #12894

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open about 2 months ago 2 comments
dagger
chore(deps): bump the engine group across 1 directory with 75 updates

aluzzardi/dagger #736

27.1.1+incompatible → 28.5.2+incompatible Major PR
Closed about 2 months ago 2 comments
aluzzardi
build(deps): bump the engine group across 1 directory with 74 updates

samalba/dagger #280

26.1.0+incompatible → 28.5.2+incompatible Major PR
Open about 2 months ago 1 comment
samalba
fix(deps): bump the external group across 1 directory with 25 updates

opentdf/platform #3202

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 2 months ago 7 comments
opentdf
chore(deps): bump the go_modules group across 12 directories with 5 updates

gnolang/gno #5316

25.0.6+incompatible → 25.0.13+incompatible Patch PR
Open 2 months ago 2 comments
gnolang
chore(deps): bump the go_modules group across 1 directory with 8 updates

Layr-Labs/kona #19

27.5.1+incompatible → 28.0.0+incompatible Major PR
Closed 2 months ago 3 comments
Layr-Labs
chore: bump the engine group across 2 directories with 62 updates

dagger/dagger #12017

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 2 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 61 updates

sipsma/dagger #1247

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 2 months ago 1 comment
sipsma
chore: bump the engine group across 2 directories with 54 updates

dagger/dagger #11987

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 2 comments
dagger
chore: bump the engine group across 2 directories with 48 updates

dagger/dagger #11969

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 58 updates

sipsma/dagger #1233

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 3 months ago 1 comment
sipsma
chore: bump the engine group across 2 directories with 56 updates

dagger/dagger #11895

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 2 comments
dagger
fix(deps): bump the external group across 1 directory with 23 updates

opentdf/platform #3094

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 3 months ago 5 comments
opentdf
Bump the go_modules group across 35 directories with 8 updates

RemyLoveLogicAI/anyquery #11

27.5.0+incompatible → 28.0.0+incompatible Major PR
Open 3 months ago 5 comments
RemyLoveLogicAI
go: bump the go_modules group across 2 directories with 6 updates

chaos-mesh/chaos-mesh #4835

26.1.5+incompatible → 28.0.0+incompatible Major PR
Closed 3 months ago 2 comments
chaos-mesh
Bump the gomod group with 16 updates

kubernetes-sigs/cri-tools #1994

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open 3 months ago 1 comment
kubernetes-sigs
chore(deps): bump the go_modules group across 1 directory with 6 updates

Layr-Labs/kona #16

27.5.1+incompatible → 28.0.0+incompatible Major PR
Closed 3 months ago 3 comments
Layr-Labs
Package Details
Name: github.com/docker/docker
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/docker/docker
JSON API: View JSON
Security Advisories

33

Active advisories
CRITICAL 2
HIGH 10
MODERATE 18
LOW 3
View All golang Advisories
Package Information
Description:

Repository: https://github.com/docker/docker
Homepage: https://github.com/docker/docker
Latest Release: v28.2.2+incompatible
12 months ago
Dependent Repos: 40,103
Dependent Packages: 16,935
Ranking: Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs
PR Status
Open 2,557 (46.8%)
Merged 824 (15.1%)
Closed 1,690 (30.9%)
PR Types
Minor 2,025 (37.1%)
Major 2,061 (37.7%)
Patch 983 (18.0%)