Skip to content
OpenAdvisories

Package · Alpine

docker

49 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-111943 Public exploit

    Distrust compromised intermediate certificates in crypto/x509

    On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…

    Go standard library crypto/x509 go stdlib Debian Ubuntu Alpine Go crates.io
  • Medium 5.5
    CVE-2022-39253 Public exploit

    Git subject to exposure of sensitive information via local clone of symbolic links

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (wh…

    git git git git Debian Ubuntu Alpine
  • Medium 6.3
    CVE-2021-41091 Public exploit

    Insufficiently restricted permissions on data directory in Docker Engine

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing …

    moby moby docker.io docker.io Debian Ubuntu Alpine Go
  • Medium 5.2
    CVE-2020-15257 Public exploit

    containerd-shim API Exposed to Host Network Containers

    containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

    containerd containerd docker.io docker Debian Ubuntu Alpine Go
  • Medium 6.0
    CVE-2020-13401 Public exploit

    Improper Input Validation in Docker Engine

    An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

    docker.io docker.io docker github.com/docker/docker-ce Debian Ubuntu Alpine Go