CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 05/06/2026 |
| CVE-2026-34040 | HIGH7.8 | Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1. | 31/03/2026 |
| CVE-2026-33997 | HIGH8.1 | Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs | 31/03/2026 |
| CVE-2025-54410 | MEDIUM5.2 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isola | 30/07/2025 |
| CVE-2025-54388 | MEDIUM4.6 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including those created by Docker. | 30/07/2025 |
| GO-2022-1107 | Container build can leak any path on the host into the container in github.com/docker/docker | 21/08/2024 |
| CVE-2024-41110 | CRITICAL9.9 | Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.
Using | 24/07/2024 |
| GO-2024-2914 | Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker | 14/06/2024 |
| GHSA-xmmx-7jpf-fx42 | MEDIUM | Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing | 10/06/2024 |
| CVE-2024-32473 | MEDIUM6.5 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where `--ipv6=false`. An container with an `ipvlan` or `macvlan` int | 18/04/2024 |
| CVE-2024-29018 | HIGH7.5 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature is frequently referred t | 20/03/2024 |
| CVE-2024-24557 | HIGH7.8 | Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions (most important being HEALTHCHECK and ONBUILD) would not cause a cache miss. An attacker with the know | 01/02/2024 |
| GHSA-jq35-85cj-fj4p | MEDIUM | /sys/devices/virtual/powercap accessible by default to containers | 30/10/2023 |
| CVE-2023-28842 | MEDIUM6.8 | Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in an | 04/04/2023 |
| CVE-2023-28841 | MEDIUM6.8 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and | 04/04/2023 |
| CVE-2023-28840 | HIGH8.7 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*.
Swarm Mode, which is compiled in an | 04/04/2023 |
| GHSA-vp35-85q5-9f25 | LOW | Container build can leak any path on the host into the container | 11/11/2022 |
| CVE-2022-36109 | MEDIUM6.3 | Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group | 09/09/2022 |