`github.com/moby/moby`

Ecosystem:
go

Package URL:
pkg:golang/github.com/moby/moby

Total PRs:
167 Dependabot PRs

Latest PR:
3 months ago

Unique Repositories:
40 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

GHSA-vp62-88p7-qqf5 CVE-2026-41568 MODERATE published 22 days ago • updated 10 days ago

## Summary A race condition during `docker cp` mount setup allows a malicious container to create empty files or directories at arbitrary absolute...

moby Access to remapped root allows privilege escalation to real root

GHSA-7452-xqpj-6rpc CVE-2021-21284 MODERATE published over 2 years ago • updated about 1 month ago

### Impact When using `--userns-remap`, if the root user in the remapped namespace has access to the host filesystem they can modify files under `...

Moby Race Condition vulnerability

GHSA-2mj3-vfvx-fc43 CVE-2024-36621 HIGH published over 1 year ago • updated 16 days ago

moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurr...

Moby (Docker Engine) Insufficiently restricted permissions on data directory

GHSA-3fwx-pjgw-3558 CVE-2021-41091 MODERATE published over 2 years ago • updated about 2 hours ago

## Impact A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficien...

Moby (Docker Engine) started with non-empty inheritable Linux process capabilities

GHSA-2mm7-x5h6-5pvq CVE-2022-24769 MODERATE published about 2 years ago • updated 8 days ago

### Impact A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities...

View all 13 advisories

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

chore: bump github.com/moby/moby from 28.1.1+incompatible to 28.5.2+incompatible

coder-contrib/coder #77

28.1.1+incompatible → 28.5.2+incompatible Minor PR

Closed 3 months ago 1 comment

build(deps): bump the project-dependency group with 14 updates

runfinch/finch-daemon #379

28.3.3+incompatible → 28.5.2+incompatible Minor PR

Closed 6 months ago 1 comment

Bump the docker group across 1 directory with 4 updates

dependabot/cli #553

28.5.1+incompatible → 28.5.2+incompatible Patch PR

Closed 6 months ago 1 comment

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #351

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed 6 months ago 1 comment

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #350

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed 6 months ago 1 comment

go: bump the docker group across 1 directory with 4 updates

eiffel-fl/inspektor-gadget #349

28.2.2+incompatible → 28.5.2+incompatible Minor PR

Closed 7 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.5.2+incompatible

onchainengineering/hmi-computer #370

27.3.1+incompatible → 28.5.2+incompatible Major PR

Closed 7 months ago 1 comment

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.5.2+incompatible

kehanzhang/athens-coder #697

27.1.1+incompatible → 28.5.2+incompatible Major PR

Closed 7 months ago 1 comment

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.5.1+incompatible

klosraf/coder #68

28.0.0+incompatible → 28.5.1+incompatible Minor PR

Closed 8 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.5.1+incompatible

onchainengineering/hmi-computer #336

27.3.1+incompatible → 28.5.1+incompatible Major PR

Closed 8 months ago 1 comment

chore: bump github.com/moby/moby from 28.3.0+incompatible to 28.5.1+incompatible

officialmofabs/coder #453

28.3.0+incompatible → 28.5.1+incompatible Minor PR

Closed 8 months ago 3 comments

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.5.1+incompatible

Txim0520/https-github.com-coder-coder #716

25.0.2+incompatible → 28.5.1+incompatible Major PR

Closed 8 months ago 1 comment

Bump the docker group with 4 updates

dsp-testing/dpabot-cli #10

28.2.2+incompatible → 28.4.0+incompatible Minor PR

Closed 9 months ago 1 comment

Bump the docker group with 4 updates

robaiken/dpabot-cli-2 #1

28.2.2+incompatible → 28.4.0+incompatible Minor PR

Closed 9 months ago 1 comment

Bump the docker group with 3 updates

dependabot/cli #510

28.3.3+incompatible → 28.4.0+incompatible Minor PR

Closed 9 months ago 1 comment

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.4.0+incompatible

kehanzhang/athens-coder #619

27.1.1+incompatible → 28.4.0+incompatible Major PR

Closed 9 months ago

Bump the all group across 1 directory with 19 updates

dsp-testing/dpabot-cli-2 #8

28.2.2+incompatible → 28.4.0+incompatible Minor PR

Closed 9 months ago 1 comment

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.4.0+incompatible in /e2e

cosmos/ibc-go #8626

27.5.1+incompatible → 28.4.0+incompatible Major PR

Closed 9 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.3+incompatible

onchainengineering/hmi-computer #263

27.3.1+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.3+incompatible

onchainengineering/hmi-wirtual #262

27.3.1+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago

Bump the all group across 1 directory with 18 updates

dsp-testing/dpabot-cli #5

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Closed 10 months ago 1 comment

Bump the all group across 1 directory with 18 updates

dsp-testing/dpabot-cli-3 #5

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Closed 10 months ago 1 comment

Bump the all group across 1 directory with 18 updates

dsp-testing/dpabot-cli-2 #5

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Closed 10 months ago 1 comment

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.3+incompatible

kehanzhang/athens-coder #580

27.1.1+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago 1 comment

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.3+incompatible

Txim0520/https-github.com-coder-coder #631

25.0.2+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago 1 comment

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5434

27.5.1+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago 1 comment

Bump the docker group with 2 updates

dependabot/cli #488

28.3.2+incompatible → 28.3.3+incompatible Patch PR

Closed 10 months ago 1 comment

Bump the docker group with 3 updates

dsp-testing/dpabot-cli-2 #2

28.2.2+incompatible → 28.3.3+incompatible Minor PR

Closed 10 months ago 2 comments

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.3+incompatible in /e2e

cosmos/ibc-go #8592

27.5.1+incompatible → 28.3.3+incompatible Major PR

Closed 10 months ago 1 comment

go: bump github.com/moby/moby from 28.3.0+incompatible to 28.3.2+incompatible in the docker group across 1 directory

inspektor-gadget/ig-desktop #233

28.3.0+incompatible → 28.3.2+incompatible Patch PR

Closed 11 months ago 1 comment

Bump the docker group with 3 updates

dependabot/cli #480

28.3.0+incompatible → 28.3.2+incompatible Patch PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.2+incompatible

onchainengineering/hmi-wirtual #256

27.3.1+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.2+incompatible

kehanzhang/athens-coder #570

27.1.1+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.2+incompatible

Txim0520/https-github.com-coder-coder #622

25.0.2+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.2+incompatible

onchainengineering/hmi-computer #249

27.3.1+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.3.2+incompatible

ongood/coder #1082

28.0.0+incompatible → 28.3.2+incompatible Minor PR

Closed 11 months ago

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.2+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5249

27.5.1+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago 3 comments

chore(deps): bump github.com/moby/moby from 27.5.1+incompatible to 28.3.2+incompatible in /e2e

cosmos/ibc-go #8581

27.5.1+incompatible → 28.3.2+incompatible Major PR

Closed 11 months ago 1 comment

build(deps): Bump github.com/moby/moby from 28.1.1+incompatible to 28.3.2+incompatible

runfinch/finch-daemon #280

28.1.1+incompatible → 28.3.2+incompatible Minor PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.1+incompatible

onchainengineering/hmi-computer #245

27.3.1+incompatible → 28.3.1+incompatible Major PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 28.2.2+incompatible to 28.3.1+incompatible

officialmofabs/codeserver #332

28.2.2+incompatible → 28.3.1+incompatible Minor PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 25.0.2+incompatible to 28.3.1+incompatible

Txim0520/https-github.com-coder-coder #612

25.0.2+incompatible → 28.3.1+incompatible Major PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 27.3.1+incompatible to 28.3.1+incompatible

onchainengineering/hmi-wirtual #247

27.3.1+incompatible → 28.3.1+incompatible Major PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.3.1+incompatible

ongood/coder #1074

28.0.0+incompatible → 28.3.1+incompatible Minor PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.1+incompatible

kehanzhang/athens-coder #562

27.1.1+incompatible → 28.3.1+incompatible Major PR

Closed 11 months ago 1 comment

chore(deps): Bump github.com/moby/moby from 27.5.1+incompatible to 28.3.1+incompatible in /test/docker-e2e

celestiaorg/celestia-app #5164

27.5.1+incompatible → 28.3.1+incompatible Major PR

Closed 11 months ago 1 comment

Bump the all group across 1 directory with 8 updates

dependabot/cli #477

28.3.0+incompatible → 28.3.1+incompatible Patch PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 28.2.2+incompatible to 28.3.0+incompatible

officialmofabs/coder #325

28.2.2+incompatible → 28.3.0+incompatible Minor PR

Closed 11 months ago 2 comments

chore: bump github.com/moby/moby from 27.1.1+incompatible to 28.3.0+incompatible

kehanzhang/athens-coder #538

27.1.1+incompatible → 28.3.0+incompatible Major PR

Closed 11 months ago 1 comment

chore: bump github.com/moby/moby from 28.0.0+incompatible to 28.3.0+incompatible

ongood/coder #1064

28.0.0+incompatible → 28.3.0+incompatible Minor PR

Closed 11 months ago 1 comment

Package Details

Name:	`github.com/moby/moby`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/moby/moby`
JSON API:	View JSON

Security Advisories

13

Active advisories

HIGH 4

MODERATE 9

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/moby/moby
Homepage:	https://github.com/moby/moby
Latest Release:	`v27.3.1+incompatible` over 1 year ago
Dependent Repos:	1,657
Dependent Packages:	461
Ranking:	Top 0.1951% by dependent repos Top 0.1978% by dependent pkgs

PR Status

Open 75 (44.9%)

Merged 20 (12.0%)

Closed 66 (39.5%)

PR Types

Major 54 (32.3%)

Minor 75 (44.9%)

Patch 32 (19.2%)