{"action":"Upgrade github.com/docker/docker to 23.0.11 or later.","affected":[{"fixed":"26.0.0-rc3","introduced":"26.0.0-rc1"},{"fixed":"25.0.5","introduced":"25.0.0"},{"fixed":"23.0.11","introduced":"0"}],"component":"github.com/docker/docker","cve_ids":["CVE-2024-29018"],"ecosystem":"Go","epss":0.00744,"exploited":false,"fixed_versions":["26.0.0-rc3","25.0.5","23.0.11"],"ghsa_id":"GHSA-mq39-4gv4-mvpx","id":"tcs_01M5KFG5P7ZY1Q4X1Z8FTMHXV9","modified_at":"2026-09-10T03:50:10.643197011Z","published_at":"2024-03-20T17:59:52Z","references":["https://osv.dev/vulnerability/GHSA-mq39-4gv4-mvpx","https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx","https://github.com/moby/moby/pull/46609","https://github.com/moby/moby"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-mq39-4gv4-mvpx","url":"https://osv.dev/vulnerability/GHSA-mq39-4gv4-mvpx"}],"summary":"Moby's external DNS requests from 'internal' networks could lead to data exfiltration"}