Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Description

References

• moby/moby security advisory · ADVISORY

More vulnerabilities in github.com/docker/docker

• CVE-2026-42306HIGH 7.2Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daem…
• CVE-2026-41568MEDIUM 6.1Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daem…
• CVE-2026-41567HIGH 7.2Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archi…
• CVE-2026-34040HIGH 7.8Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to byp…
• CVE-2026-33997HIGH 8.1Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg…