An open index of dependabot pull requests across open source projects.

github.com/docker/docker

Ecosystem:
go
Package URL:
pkg:golang/github.com/docker/docker
Total PRs:
5,467 Dependabot PRs
Latest PR:
7 days ago
Unique Repositories:
1,823 repositories
Unique Repos (30 days):
4 repositories
Security Advisories
/sys/devices/virtual/powercap accessible by default to containers
GHSA-jq35-85cj-fj4p MODERATE published over 2 years ago • updated 6 days ago
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware ener...
Moby firewalld reload makes published container ports accessible from remote hosts
GHSA-x4rx-4gw3-53p4 CVE-2025-54388 MODERATE published 10 months ago • updated 8 days ago
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various o...
Authz zero length regression
GHSA-v23v-6jw2-98fq CVE-2024-41110 CRITICAL published almost 2 years ago • updated 1 day ago
A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (Au...
Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing
GHSA-xmmx-7jpf-fx42 MODERATE published almost 2 years ago • updated 1 day ago
### Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and i...
Arbitrary File Override in Docker Engine
GHSA-v4h8-794j-g8mm CVE-2015-3631 MODERATE published over 4 years ago • updated 7 days ago
Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes ...
Recent PRs (filtered by: Closed , Patch PRs )
chore: bump the engine group across 2 directories with 62 updates

dagger/dagger #12017

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 2 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 54 updates

dagger/dagger #11987

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 2 comments
dagger
chore: bump the engine group across 2 directories with 48 updates

dagger/dagger #11969

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 56 updates

dagger/dagger #11895

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 3 months ago 2 comments
dagger
Bump the docker group across 1 directory with 4 updates

dependabot/cli #553

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 5 months ago 1 comment
dependabot
Bump the go-minor group across 1 directory with 10 updates

Nuvix-Tech/cli #18

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 2 comments
Nuvix-Tech
chore: bump the engine group across 2 directories with 39 updates

sipsma/dagger #1187

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 2 comments
sipsma
chore(deps): bump the go group across 1 directory with 31 updates

pomerium/pomerium #5969

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 5 comments
pomerium
chore(deps): bump the go group with 28 updates

pomerium/pomerium #5952

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 1 comment
pomerium
chore(deps): bump the all-dependencies group with 7 updates

kemingy/envd #122

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 1 comment
kemingy
chore(deps): bump the all-dependencies group with 4 updates

tensorchord/envd #2070

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 1 comment
tensorchord
chore: bump the golang group across 1 directory with 17 updates

AndiDog/skaffold #55

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 1 comment
AndiDog
chore: bump the engine group across 2 directories with 35 updates

sipsma/dagger #1170

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 2 comments
sipsma
Bump the go-minor group across 1 directory with 7 updates

Nuvix-Tech/cli #13

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 6 months ago 2 comments
Nuvix-Tech
Bump the go-minor group across 1 directory with 3 updates

Nuvix-Tech/cli #11

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 2 comments
Nuvix-Tech
build(deps): bump the go-dependencies group with 5 updates

buildpacks/pack #2463

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 1 comment
buildpacks
Bump the go-modules group across 1 directory with 9 updates

picatz/dynabuf #47

28.5.0+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 2 comments
picatz
chore: bump the engine group across 2 directories with 22 updates

dagger/dagger #11378

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 1 comment
dagger
chore: bump the engine group across 2 directories with 18 updates

dagger/dagger #11363

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 1 comment
dagger
Bump the all-updates group with 11 updates

cirruslabs/cirrus-cli #957

28.5.0+incompatible → 28.5.1+incompatible Patch PR
Closed 8 months ago 2 comments
cirruslabs
chore(deps): bump the engine group across 2 directories with 27 updates

dagger/dagger #10972

28.3.2+incompatible → 28.3.3+incompatible Patch PR
Closed 9 months ago 1 comment
dagger
chore(deps): bump the engine group across 2 directories with 23 updates

dagger/dagger #10860

28.3.2+incompatible → 28.3.3+incompatible Patch PR
Closed 10 months ago 2 comments
dagger
Package Details
Name: github.com/docker/docker
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/docker/docker
JSON API: View JSON
Security Advisories

33

Active advisories
CRITICAL 2
HIGH 10
MODERATE 18
LOW 3
View All golang Advisories
Package Information
Description:

Repository: https://github.com/docker/docker
Homepage: https://github.com/docker/docker
Latest Release: v28.2.2+incompatible
12 months ago
Dependent Repos: 40,103
Dependent Packages: 16,935
Ranking: Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs
PR Status
Open 2,557 (46.8%)
Merged 824 (15.1%)
Closed 1,691 (30.9%)
PR Types
Minor 2,025 (37.0%)
Major 2,062 (37.7%)
Patch 983 (18.0%)