VDB
GO-2024-2512
GO-2024-2512
PUBLISHED
Classic builder cache poisoning in github.com/docker/docker
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | docker/docker | 0, 25.0.0+incompatible, 0 |
| github.com | moby/moby | 0, 25.0.0+incompatible, 0 |
Timeline
- Jun 28, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc advisory
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae patch
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd patch
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff patch