VDB
GO-2026-4887
GO-2026-4887
PUBLISHED
Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | k3s-1.34 | *, *, * |
| chainguard | undock | 0, 0 |
| wolfi | trivy-operator | 0, 0, 0 |
| chainguard | teleport-17 | 0, 0 |
| chainguard | vault-1.16 | 0, 0 |
| chainguard | prometheus-fips-3.8 | *, *, * |
| wolfi | neuvector-scanner | 0, 0, 0 |
| wolfi | aws-otel-collector | 0, 0, 0 |
| wolfi | envoy-gateway | 0, 0, 0 |
| chainguard | newrelic-infrastructure-agent | 0, 0, 0 |
| chainguard | trivy-operator | 0, 0 |
| wolfi | docker-29 | 0, 0, 0 |
| wolfi | rancher-agent-2.13 | 0, 0, 0 |
| wolfi | kpt | 0, 0 |
| wolfi | rancher-2.13 | 0, 0, 0 |
| wolfi | podman | 0, 0, 0 |
| chainguard | k3s-1.35 | * |
| chainguard | wolfictl | 0, 0 |
| chainguard | ko-fips | 0, 0, 0 |
| chainguard | rancher-2.13 | 0, 0 |
…and 201 more
Timeline
- Apr 2, 2026 CVE Published
- Apr 3, 2026 CVE Updated