Go/github.com/docker/docker CVE-2024-29018: unknown, EPSS 0.74%
Data exfiltration from internal networks in github.com/docker/docker
Action: Upgrade github.com/docker/docker to 25.0.5+incompatible or later.
go get github.com/docker/docker@v25.0.5+incompatiblego get github.com/docker/docker@v26.0.0-rc3+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 25.0.0+incompatible | 25.0.5+incompatible | - |
| 26.0.0-rc1+incompatible | 26.0.0-rc3+incompatible | - |
Fixed versions
| 25.0.5+incompatible | 26.0.0-rc3+incompatible |
Sources
- osv: GO-2024-2659
- https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx
- https://github.com/moby/moby/pull/46609
CVE-2024-29018 · published · modified · JSON