{"action":"Upgrade github.com/moby/moby to 20.10.11 or later.","affected":[{"fixed":"20.10.11","introduced":"0"}],"component":"github.com/moby/moby","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["20.10.11"],"ghsa_id":"GHSA-xmmx-7jpf-fx42","id":"tcs_01M5KFSEM82PV2GKDBGYY2F1T8","modified_at":"2026-09-10T03:50:16.095481738Z","published_at":"2024-06-10T18:39:03Z","references":["https://osv.dev/vulnerability/GHSA-xmmx-7jpf-fx42","https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xmmx-7jpf-fx42#Go/github.com/moby/moby","url":"https://osv.dev/vulnerability/GHSA-xmmx-7jpf-fx42"}],"summary":"Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing"}