Go/github.com/moby/moby CVE-2024-24557: medium 6.9, EPSS 0.26%
Classic builder cache poisoning
Action: Upgrade github.com/moby/moby to 24.0.9 or later.
go get github.com/moby/moby@v24.0.9go get github.com/moby/moby@v25.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9 | - |
| 25.0.0 | 25.0.2 | - |
Fixed versions
| 24.0.9 | 25.0.2 |
Sources
- osv: GHSA-xw73-rw38-6vjc#Go/github.com/moby/moby
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://nvd.nist.gov/vuln/detail/CVE-2024-24557
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
- https://github.com/moby/moby
CVE-2024-24557 · published · modified · JSON