moby vulnerabilities

Docker Engine overlay-network encryption rules are not restored after a firewalld reload

Docker · Docker Engine

Cluster-API proxy overwrites forwarded client identity with its own

moby · SwarmKit

Malicious client could set xattr value outside of BuildKit state directory

Moby · BuildKit

Possible panic from Git source resolver

moby · BuildKit

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

moby · sys

Docker Engine insecure-registry fallback via malicious DNS responses

Docker · Docker Engine

Blind VXLAN injection into encrypted overlay networks from cluster peer

Docker · Docker Engine

Malformed LLB file operation can crash buildkitd

moby · BuildKit

BuildKit proxy CA cleanup can be disrupted by build steps

moby · BuildKit

Crafted Git build source can bypass certain policy validation

moby · BuildKit