VDB
GO-2024-2512
GO-2024-2512
PUBLISHED
Classic builder cache poisoning in github.com/docker/docker
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | cosign-fips | 0 |
| wolfi | k9s | 0 |
| wolfi | chartmuseum | 0 |
| wolfi | ctop | 0, 0, 0 |
| wolfi | argo-workflows | 0, 0, 0 |
| chainguard | k9s | 0, 0, 0 |
| wolfi | flux | 0, 0, 0 |
| wolfi | kubescape | 0, 0, 0 |
| wolfi | vexctl | 0, 0, 0 |
| wolfi | flux-helm-controller | 0 |
| chainguard | policy-controller | 0 |
| chainguard | skopeo | 0 |
| wolfi | docker-machine-driver-harvester | 0, 0, 0 |
| wolfi | aactl | 0, 0, 0 |
| chainguard | goreleaser | 0, 0, 0 |
| wolfi | docker | *, *, * |
| wolfi | zarf | 0, 0, 0 |
| chainguard | k3d | 0, 0, 0 |
| chainguard | argo-workflows | 0, 0, 0 |
| chainguard | argo-workflows-fips | 0, 0, 0 |
…and 103 more
Timeline
- Jun 28, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc advisory
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae fix
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd fix
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff fix