github.com/moby/moby
Ecosystem:
go
go
Package URL:
pkg:golang/github.com/moby/moby
Total PRs:
167 Dependabot PRs
167 Dependabot PRs
Latest PR:
3 months ago
3 months ago
Unique Repositories:
40 repositories
40 repositories
Unique Repos (30 days):
1 repository
1 repository
Security Advisories
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
GHSA-vp62-88p7-qqf5
CVE-2026-41568
MODERATE
published 23 days ago
• updated 11 days ago
## Summary
A race condition during `docker cp` mount setup allows a malicious container to create empty files or directories at arbitrary absolute...
moby Access to remapped root allows privilege escalation to real root
GHSA-7452-xqpj-6rpc
CVE-2021-21284
MODERATE
published over 2 years ago
• updated about 1 month ago
### Impact
When using `--userns-remap`, if the root user in the remapped namespace has access to the host filesystem they can modify files under `...
Moby Race Condition vulnerability
GHSA-2mj3-vfvx-fc43
CVE-2024-36621
HIGH
published over 1 year ago
• updated 17 days ago
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurr...
Moby (Docker Engine) Insufficiently restricted permissions on data directory
GHSA-3fwx-pjgw-3558
CVE-2021-41091
MODERATE
published over 2 years ago
• updated about 13 hours ago
## Impact
A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficien...
Moby (Docker Engine) started with non-empty inheritable Linux process capabilities
GHSA-2mm7-x5h6-5pvq
CVE-2022-24769
MODERATE
published about 2 years ago
• updated about 6 hours ago
### Impact
A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities...
Recent PRs
go: bump the docker group across 2 directories with 3 updates
inspektor-gadget/inspektor-gadget #4536
28.1.1+incompatible → 28.2.1+incompatible
Minor PR
Merged
about 1 year ago
go: bump github.com/moby/moby from 28.1.1+incompatible to 28.2.1+incompatible in the docker group across 1 directory
inspektor-gadget/ig-desktop #193
28.1.1+incompatible → 28.2.1+incompatible
Minor PR
Open
about 1 year ago
Bump github.com/moby/moby from 28.1.1+incompatible to 28.2.0+incompatible in /examples/go
28.1.1+incompatible → 28.2.0+incompatible
Minor PR
Open
about 1 year ago
build(deps): bump github.com/moby/moby from 24.0.9+incompatible to 26.1.0+incompatible in /interchaintest in the go_modules group across 1 directory
PreFrontalCorporate/relayer #2
24.0.9+incompatible → 26.1.0+incompatible
Major PR
Open
about 1 year ago
Bump the docker group with 5 updates
dependabot/cli #439
27.5.1+incompatible → 28.1.1+incompatible
Major PR
Merged
about 1 year ago
chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.1.1+incompatible
strangelove-ventures/interchaintest #1357
27.5.1+incompatible → 28.1.1+incompatible
Major PR
Closed
about 1 year ago
2 comments
chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.1.1+incompatible
Txim0520/https-github.com-coder-coder #534
25.0.2+incompatible → 28.1.1+incompatible
Major PR
Closed
about 1 year ago
build(deps): bump github.com/moby/moby from 28.0.4+incompatible to 28.1.1+incompatible
chainguard-dev/melange #1937
28.0.4+incompatible → 28.1.1+incompatible
Minor PR
Open
about 1 year ago
2 comments
build(deps): bump the all group across 1 directory with 18 updates
SherfeyInv/brew #125
27.3.1+incompatible → 28.1.1+incompatible
Major PR
Closed
about 1 year ago
2 comments
chore(deps): bump the go_modules group across 12 directories with 9 updates
offsoc/cds #2
25.0.3+incompatible → 26.1.0+incompatible
Major PR
Closed
about 1 year ago
1 comment
chore(deps): bump github.com/moby/moby from 26.0.0+incompatible to 26.1.0+incompatible in the go_modules group across 1 directory
26.0.0+incompatible → 26.1.0+incompatible
Minor PR
Closed
over 1 year ago
3 comments
Package Details
| Name: | github.com/moby/moby |
| Ecosystem: | go |
| PURL Type: | golang |
| Package URL: | pkg:golang/github.com/moby/moby |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
| Repository: | https://github.com/moby/moby |
| Homepage: | https://github.com/moby/moby |
| Latest Release: |
v27.3.1+incompatible
over 1 year ago |
| Dependent Repos: | 1,657 |
| Dependent Packages: | 461 |
| Ranking: | Top 0.1951% by dependent repos Top 0.1978% by dependent pkgs |