GHSA-232p-vwff-86mp: github.com/docker/docker fixed in 23.0.3 and 20.10.24

GHSA-232p-vwff-86mp PUBLISHED CVSS 7.5 HIGH

Docker Swarm encrypted overlay network may be unauthenticated

Record from GitHub Advisory Database · Published April 4, 2023

github.com/docker/docker is fixed in 23.0.3 and 20.10.24 (Go Modules)

Docker Swarm encrypted overlay network may be unauthenticated

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
github.com/docker/docker	Go Modules	23.0.3, 20.10.24
apko	Wolfi	0.7.3-r1
helm-3	Chainguard	3.19.2-r1
up	Chainguard	0.24.0-r1
helm-3	Wolfi	3.19.2-r1
ko	Chainguard	0.13.0-r3
apko	Chainguard	0.7.3-r1
ko	Wolfi	0.13.0-r3
up	Wolfi	0.24.0-r1
ctop	Chainguard	0.7.7-r13
helm	Wolfi	3.12.2-r1
bom	Wolfi	0.6.0-r0

9 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

Affected products

Vendor	Product	Versions
wolfi	apko	0
chainguard	helm-3	0
chainguard	prometheus-2.38	*
chainguard	prometheus-fips-2.38	*
chainguard	up	0
wolfi	helm-3	0
chainguard	ko	0
github.com	docker/docker	23.0.0, 1.12.0
chainguard	apko	0
wolfi	ko	0
wolfi	up	0
chainguard	ctop	0
wolfi	helm	0
wolfi	bom	0
wolfi	ctop	0
chainguard	flux-helm-controller-0.37	0
chainguard	helm	0
chainguard	helm-4	0
chainguard	flux-image-reflector-controller-0	0
chainguard	kyverno-1.8	*

…and 4 more

Timeline

Apr 4, 2023 CVE Published
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-232p-vwff-86mp
vulnetix vdb fixes GHSA-232p-vwff-86mp

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-232p-vwff-86mp/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →