CVE-2026-61801 affecting package moby-engine for versions less than 25.0.18-1

CVE-2026-61801 affecting package moby-engine for versions less than 25.0.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-92542 affecting package moby-engine for versions less than 25.0.18-1

CVE-2026-92542 affecting package moby-engine for versions less than 25.0.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-93323 affecting package moby-engine for versions less than 25.0.18-1

CVE-2026-93323 affecting package moby-engine for versions less than 25.0.18-1. An upgraded version of the package is available that resolves this issue...

AZL-108078 CVE-2026-95838 affecting package moby-engine 25.0.3-20

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are...

CVE-2026-84304 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-84304 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-78662 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-78662 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-84445 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-84445 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-37236 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-37236 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-56855 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-56855 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

AZL-107751 CVE-2026-97032 affecting package moby-engine 25.0.3-20

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107733 CVE-2026-78669 affecting package moby-engine 25.0.3-20

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107736 CVE-2026-78663 affecting package moby-engine 25.0.3-20

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107742 CVE-2026-78659 affecting package moby-engine 25.0.3-20

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107730 CVE-2026-78660 affecting package moby-engine 25.0.3-20

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107745 CVE-2026-61801 affecting package moby-engine 25.0.3-20

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

AZL-107739 CVE-2026-92542 affecting package moby-engine 25.0.3-20

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

AZL-107748 CVE-2026-92543 affecting package moby-engine 25.0.3-20

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

AZL-106821 CVE-2026-93321 affecting package moby-engine 25.0.3-20

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

AZL-106812 CVE-2026-93326 affecting package moby-engine 25.0.3-20

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

AZL-106824 CVE-2026-93323 affecting package moby-engine 25.0.3-20

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...