Go/github.com/docker/cli CVE-2021-41092: unknown, EPSS 1.65%
Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli
Action: Upgrade github.com/docker/cli to 20.10.9+incompatible or later.
go get github.com/docker/cli@v20.10.9+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.10.9+incompatible | - |
Fixed versions
| 20.10.9+incompatible |
Sources
- osv: GO-2024-2912
- https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v
- https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b
CVE-2021-41092 · published · modified · JSON