Skip to content
OpenAdvisories

Package · Wolfi

docker-dind

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2024-51744

    Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

    golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and …

    golang-jwt jwt katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go
  • Low 3.6
    CVE-2024-45310

    runc can be confused to create empty files/directories on the host

    runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…

    opencontainers runc k3s k3s-static Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Low 2.8
    CVE-2021-41089

    `docker cp` allows unexpected chmod of host files

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for ex…

    moby moby docker.io docker.io Debian Ubuntu Alpine Wolfi Go