Skip to content
OpenAdvisories

Package · Azure Linux

docker-cli

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-116586

    Go JOSE: Panics in JSON parsing

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, parsing attacker-controll…

    go-jose go-jose zarf k3d-proxy Debian Ubuntu Azure Linux Wolfi Go
  • Medium 5.5
    CVE-2026-61801

    github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

    The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allow…

    moby sys zarf k3d Debian Ubuntu Azure Linux Wolfi Go
  • Medium 5.3
    CVE-2025-11065

    Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

    A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat OpenShift Container Platform 4 Linux Debian Ubuntu Azure Linux Wolfi Go