Skip to content
OpenAdvisories

Vendor

Docker

62 known vulnerabilities.

Products

Docker Desktop 33 Docker Sandboxes 11 Docker Engine 5 Docker Buildx 4 Compose 2 model-runner 2 mcp-gateway 2 Docker CLI 2 CS Docker Engine 2 docker-credential-helpers 1 Docker Hub 1 Docker Compose 1 buildx 1 cli 1 docker/daemon 1 Docker Engine overlay network driver 1 Desktop 0 Sandboxes 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.8
    CVE-2026-121542

    Bake filesystem path entitlements approval can be skipped for path using basename prefix

    In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…

    Docker Docker Buildx docker.io docker.io-app Debian Ubuntu
  • Low 2.4
    CVE-2025-13743

    Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs

    Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.

    Docker Docker Desktop