`github.com/moby/moby`

Ecosystem:
go

Package URL:
pkg:golang/github.com/moby/moby

Total PRs:
158 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
39 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Moby (Docker Engine) started with non-empty inheritable Linux process capabilities

GHSA-2mm7-x5h6-5pvq CVE-2022-24769 MODERATE published over 1 year ago • updated about 3 hours ago

### Impact A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities...

Moby (Docker Engine) Insufficiently restricted permissions on data directory

GHSA-3fwx-pjgw-3558 CVE-2021-41091 MODERATE published almost 2 years ago • updated about 3 hours ago

## Impact A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficien...

Path Traversal in Moby builder

GHSA-6hwg-w5jg-9c6x CVE-2020-27534 MODERATE published almost 2 years ago • updated about 3 hours ago

util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, con...

NULL Pointer Dereference on moby image history

GHSA-q59j-vv4j-v33c CVE-2024-36620 MODERATE published 12 months ago • updated about 3 hours ago

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

moby docker daemon crash during image pull of malicious image

GHSA-6fj5-m822-rqx8 CVE-2021-21285 MODERATE published almost 2 years ago • updated about 3 hours ago

### Impact Pulling an intentionally malformed Docker image manifest crashes the `dockerd` daemon. ### Patches Versions 20.10.3 and 19.03.15 cont...

View all 8 advisories

Recent PRs

Bump the docker group across 1 directory with 3 updates

dependabot/cli #495

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 3 months ago

build(deps): bump the gomod group across 1 directory with 5 updates

chainguard-dev/melange #2120

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 3 months ago 1 comment

go: bump the docker group across 2 directories with 4 updates

eiffel-fl/inspektor-gadget #320

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 3 months ago 2 comments

Bump the all group across 1 directory with 16 updates

dsp-testing/dpabot-cli-3 #4

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 3 months ago 1 comment

Bump the docker group with 3 updates

dsp-testing/dpabot-cli-3 #2

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 3 months ago

Bump github.com/moby/moby from 1.13.1 to 26.1.0+incompatible

groove-x/cgroup-exporter #11

1.13.1 → 26.1.0+incompatible Major PR

Open 4 months ago

Bump github.com/moby/moby from 28.3.2+incompatible to 28.3.3+incompatible

ChrisWiegman/kana #87

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 4 months ago

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.3+incompatible

kehanzhang/athens-coder #580

27.1.1+incompatible → 28.3.3+incompatible Major PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.3+incompatible

Txim0520/https-github.com-coder-coder #631

25.0.2+incompatible → 28.3.3+incompatible Major PR

Closed 4 months ago 1 comment

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5434

27.5.1+incompatible → 28.3.3+incompatible Major PR

Closed 4 months ago 1 comment

Bump the docker group with 2 updates

dependabot/cli #488

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 16 updates

dsp-testing/dpabot-cli-2 #4

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 4 months ago

Bump the docker group with 3 updates

dsp-testing/dpabot-cli-2 #2

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Closed 4 months ago 2 comments

Bump the all group across 1 directory with 16 updates

dsp-testing/dpabot-cli #4

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 4 months ago

build(deps): bump the dependencies group with 3 updates

Scalingo/go-plugins-helpers #78

28.3.0+incompatible → 28.3.3+incompatible Patch PR

Merged 4 months ago

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible

strangelove-ventures/interchaintest #1386

27.5.1+incompatible → 28.3.3+incompatible Major PR

Open 4 months ago 1 comment

chore(deps): bump the dependencies group with 9 updates

Scalingo/sand #306

28.3.0+incompatible → 28.3.3+incompatible Patch PR

Open 4 months ago

Bump the docker group with 3 updates

dsp-testing/dpabot-cli #3

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Open 4 months ago

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible

cosmos/interchaintest #25

27.5.1+incompatible → 28.3.3+incompatible Major PR

Open 4 months ago 1 comment

build(deps): Bump github.com/moby/moby from 28.3.2+incompatible to 28.3.3+incompatible

runfinch/finch-daemon #294

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 4 months ago

go: bump the docker group across 2 directories with 3 updates

inspektor-gadget/inspektor-gadget #4762

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 4 months ago

build(deps): bump the gomod group across 1 directory with 3 updates

chainguard-dev/melange #2110

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Open 4 months ago

Bump github.com/moby/moby from 28.3.2+incompatible to 28.3.3+incompatible in /examples/go

jakecoffman/auto-merge #624

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Merged 4 months ago

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible in /e2e

cosmos/ibc-go #8592

27.5.1+incompatible → 28.3.3+incompatible Major PR

Closed 4 months ago 1 comment

deps: bump github.com/moby/moby from 28.3.2+incompatible to 28.3.3+incompatible

0xB1a60/runapp #33

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Merged 4 months ago

go: bump github.com/moby/moby from 28.3.0+incompatible to 28.3.2+incompatible in the docker group across 1 directory

inspektor-gadget/ig-desktop #233

28.3.0+incompatible → 28.3.2+incompatible Patch PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.2+incompatible

cosmos/interchaintest #20

27.5.1+incompatible → 28.3.2+incompatible Major PR

Open 4 months ago 2 comments

Bump the docker group with 3 updates

dependabot/cli #482

28.3.0+incompatible → 28.3.2+incompatible Patch PR

Merged 4 months ago

Bump the docker group with 3 updates

dependabot/cli #480

28.3.0+incompatible → 28.3.2+incompatible Patch PR

Closed 4 months ago 1 comment

build(deps): bump github.com/moby/moby from 28.0.4+incompatible to 28.3.2+incompatible

chainguard-dev/melange #2091

28.0.4+incompatible → 28.3.2+incompatible Minor PR

Open 4 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.2+incompatible

onchainengineering/hmi-wirtual #256

27.3.1+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.2+incompatible

kehanzhang/athens-coder #570

27.1.1+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.2+incompatible

Txim0520/https-github.com-coder-coder #622

25.0.2+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.2+incompatible

onchainengineering/hmi-computer #249

27.3.1+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.3.2+incompatible

ongood/coder #1082

28.0.0+incompatible → 28.3.2+incompatible Minor PR

Closed 4 months ago

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.2+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5249

27.5.1+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago 3 comments

deps: bump github.com/moby/moby from 28.3.1+incompatible to 28.3.2+incompatible

0xB1a60/runapp #30

28.3.1+incompatible → 28.3.2+incompatible Patch PR

Open 4 months ago 1 comment

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.2+incompatible in /e2e

cosmos/ibc-go #8581

27.5.1+incompatible → 28.3.2+incompatible Major PR

Closed 4 months ago 1 comment

build(deps): Bump github.com/moby/moby from 28.1.1+incompatible to 28.3.2+incompatible

runfinch/finch-daemon #280

28.1.1+incompatible → 28.3.2+incompatible Minor PR

Closed 4 months ago 1 comment

Bump github.com/moby/moby from 28.3.1+incompatible to 28.3.2+incompatible in /examples/go

jakecoffman/auto-merge #610

28.3.1+incompatible → 28.3.2+incompatible Patch PR

Merged 4 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.1+incompatible

onchainengineering/hmi-computer #245

27.3.1+incompatible → 28.3.1+incompatible Major PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 28.2.2+incompatible to 28.3.1+incompatible

officialmofabs/coder #332

28.2.2+incompatible → 28.3.1+incompatible Minor PR

Open 4 months ago 1 comment

chore: bump github.com/moby/moby from 28.2.2+incompatible to 28.3.1+incompatible

officialmofabs/codeserver #332

28.2.2+incompatible → 28.3.1+incompatible Minor PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.1+incompatible

Txim0520/https-github.com-coder-coder #612

25.0.2+incompatible → 28.3.1+incompatible Major PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.1+incompatible

onchainengineering/hmi-wirtual #247

27.3.1+incompatible → 28.3.1+incompatible Major PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.3.1+incompatible

ongood/coder #1074

28.0.0+incompatible → 28.3.1+incompatible Minor PR

Closed 4 months ago 1 comment

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.1+incompatible

kehanzhang/athens-coder #562

27.1.1+incompatible → 28.3.1+incompatible Major PR

Closed 4 months ago 1 comment

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.1+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5164

27.5.1+incompatible → 28.3.1+incompatible Major PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 8 updates

dependabot/cli #477

28.3.0+incompatible → 28.3.1+incompatible Patch PR

Closed 5 months ago 1 comment

Bump github.com/moby/moby from 28.3.0+incompatible to 28.3.1+incompatible in /examples/go

jakecoffman/auto-merge #608

28.3.0+incompatible → 28.3.1+incompatible Patch PR

Open 5 months ago

Package Details

Name:	`github.com/moby/moby`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/moby/moby`
JSON API:	View JSON

Security Advisories

8

Active advisories

HIGH 2

MODERATE 6

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/moby/moby
Homepage:	https://github.com/moby/moby
Latest Release:	`v27.3.1+incompatible` about 1 year ago
Dependent Repos:	1,657
Dependent Packages:	461
Ranking:	Top 0.1951% by dependent repos Top 0.1978% by dependent pkgs

PR Status

Open 74 (46.8%)

Merged 20 (12.7%)

Closed 58 (36.7%)

PR Types

Major 52 (32.9%)

Patch 30 (19.0%)

Minor 70 (44.3%)