VDB
GO-2026-4883
GO-2026-4883
PUBLISHED
Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | k3s-1.37 | *, *, * |
| chainguard | buf | 0, 0, 0 |
| chainguard | skopeo | 0, 0, 0 |
| wolfi | datadog-agent-7.77 | 0, 0, 0 |
| wolfi | grafana-alloy | 0, 0, 0 |
| chainguard | buildah | 0, 0, 0 |
| chainguard | rancher-machine | 0, 0, 0 |
| wolfi | zarf | 0, 0, 0 |
| chainguard | goreleaser | 0, 0, 0 |
| chainguard | grafana-beyla | 0, 0, 0 |
| chainguard | traefik-3.6 | 0, 0, 0 |
| chainguard | gitlab-runner-19.3 | *, *, * |
| wolfi | kpt | 0, 0, 0 |
| wolfi | opentelemetry-collector-contrib | 0, 0, 0 |
| wolfi | scorecard | 0 |
| chainguard | envoy-gateway-fips-1.7 | 0, 0, 0 |
| chainguard | rancher-agent-2.12 | 0, 0, 0 |
| chainguard | opentelemetry-collector | 0, 0, 0 |
| chainguard | cloudbeat-fips-9.4 | 0, 0, 0 |
| wolfi | k3s-1.36 | *, *, * |
…and 214 more
Timeline
- Apr 2, 2026 CVE Published
- Apr 3, 2026 CVE Updated