{"action":"Upgrade github.com/moby/moby to 29.3.1 or later.","affected":[{"fixed":"29.3.1","introduced":"0"}],"component":"github.com/moby/moby","cve_ids":["CVE-2026-34040"],"ecosystem":"Go","epss":0.00163,"exploited":false,"fixed_versions":["29.3.1"],"ghsa_id":"GHSA-x744-4wpc-v9h2","id":"tcs_01M5KFRR7EGRCSF552EACY6GAN","modified_at":"2026-09-08T05:15:04.303637708Z","published_at":"2026-03-27T17:43:16Z","references":["https://osv.dev/vulnerability/GHSA-x744-4wpc-v9h2","https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq","https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2","https://nvd.nist.gov/vuln/detail/CVE-2026-34040","https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38","https://docs.docker.com/engine/extend/plugins_authorization","https://github.com/moby/moby","https://github.com/moby/moby/releases/tag/docker-v29.3.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x744-4wpc-v9h2","url":"https://osv.dev/vulnerability/GHSA-x744-4wpc-v9h2"}],"summary":"Moby has AuthZ plugin bypass when provided oversized request bodies"}