An open index of dependabot pull requests across open source projects.

github.com/docker/docker

Ecosystem:
go
Package URL:
pkg:golang/github.com/docker/docker
Total PRs:
5,378 Dependabot PRs
Latest PR:
about 6 hours ago
Unique Repositories:
1,785 repositories
Unique Repos (30 days):
15 repositories
Security Advisories
Moby (Docker Engine) started with non-empty inheritable Linux process capabilities
GHSA-2mm7-x5h6-5pvq CVE-2022-24769 MODERATE published almost 2 years ago • updated 2 days ago
### Impact A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities...
Arbitrary Code Execution
GHSA-997c-fj8j-rq5h CVE-2014-9357 HIGH published about 4 years ago • updated 29 days ago
Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA...
Symlink Attack in Libcontainer and Docker Engine
GHSA-g7v2-2qxx-wjrw CVE-2015-3627 MODERATE published about 4 years ago • updated about 1 month ago
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local ...
Moby's external DNS requests from 'internal' networks could lead to data exfiltration
GHSA-mq39-4gv4-mvpx CVE-2024-29018 MODERATE published almost 2 years ago • updated 3 days ago
Moby is an open source container framework originally developed by Docker Inc. as Docker. It is a key component of Docker Engine, Docker Desktop, a...
Authz zero length regression
GHSA-v23v-6jw2-98fq CVE-2024-41110 CRITICAL published over 1 year ago • updated 7 days ago
A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (Au...
Recent PRs (filtered by: Minor PRs )
Bump the gomod group with 16 updates

kubernetes-sigs/cri-tools #1994

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open 1 day ago 1 comment
kubernetes-sigs
fix(deps): bump the external group across 1 directory with 22 updates

opentdf/platform #3010

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open about 1 month ago 9 comments
opentdf
Bump the go group with 155 updates

Aazme/teleport2 #39

28.1.1+incompatible → 28.5.2+incompatible Minor PR
Open about 2 months ago 1 comment
Aazme
build(deps): bump the dependencies group across 1 directory with 15 updates

underth-moon99/act #10

28.0.4+incompatible → 28.5.2+incompatible Minor PR
Closed about 2 months ago 1 comment
underth-moon99
fix(deps): bump the external group across 1 directory with 22 updates

opentdf/platform #2982

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open about 2 months ago 5 comments
opentdf
fix(deps): bump the external group across 1 directory with 21 updates

opentdf/platform #2980

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Open about 2 months ago 1 comment
opentdf
chore: bump the engine group across 2 directories with 52 updates

TomChv/dagger #516

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Open about 2 months ago 2 comments
TomChv
build(deps): bump the dependencies group across 1 directory with 8 updates

abitmore/act #239

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
abitmore
chore: bump the engine group across 2 directories with 46 updates

TomChv/dagger #511

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Open 3 months ago 2 comments
TomChv
go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #351

28.2.2+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
eiffel-fl
go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #350

28.2.2+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
eiffel-fl
go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #349

28.2.2+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
eiffel-fl
chore(deps): bump the go-deps group across 1 directory with 6 updates

ahouab/Karpenter #58

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
ahouab
fix(deps): bump the external group across 1 directory with 28 updates

opentdf/platform #2934

28.3.3+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 6 comments
opentdf
chore: bump the engine group across 2 directories with 45 updates

TomChv/dagger #506

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Open 3 months ago 1 comment
TomChv
Bump the root-deps group with 8 updates

google/go-containerregistry #2154

28.2.2+incompatible → 28.5.2+incompatible Minor PR
Open 3 months ago 4 comments
google
chore(deps): bump the go-deps group with 5 updates

ahouab/Karpenter #52

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Closed 3 months ago 1 comment
ahouab
Bump the go_modules group across 1 directory with 4 updates

Arkimking86/akim-hub #2

28.2.2+incompatible → 28.3.3+incompatible Minor PR
Open 3 months ago 1 comment
Arkimking86
Bump the go_modules group across 1 directory with 2 updates

anonim-01/mcp-gateway #1

28.2.2+incompatible → 28.3.3+incompatible Minor PR
Open 3 months ago 1 comment
anonim-01
Bump the go group across 1 directory with 87 updates

gravitational/teleport #60972

28.4.0+incompatible → 28.5.1+incompatible Minor PR
Open 4 months ago 2 comments
gravitational
Package Details
Name: github.com/docker/docker
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/docker/docker
JSON API: View JSON
Security Advisories

29

Active advisories
CRITICAL 2
HIGH 8
MODERATE 16
LOW 3
View All golang Advisories
Package Information
Description:

Repository: https://github.com/docker/docker
Homepage: https://github.com/docker/docker
Latest Release: v28.2.2+incompatible
9 months ago
Dependent Repos: 40,103
Dependent Packages: 16,935
Ranking: Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs
PR Status
Open 2,532 (47.1%)
Merged 824 (15.3%)
Closed 1,626 (30.2%)
PR Types
Minor 2,012 (37.4%)
Major 2,002 (37.2%)
Patch 966 (18.0%)