{"action":"Upgrade github.com/docker/cli to 20.10.9+incompatible or later.","affected":[{"fixed":"20.10.9+incompatible","introduced":"0"}],"component":"github.com/docker/cli","cve_ids":["CVE-2021-41092"],"ecosystem":"Go","epss":0.01652,"exploited":false,"fixed_versions":["20.10.9+incompatible"],"ghsa_id":"GHSA-99pg-grm5-qq3v","id":"tcs_01M5KG3MT5XY4RFAVRN1KYTGNE","modified_at":"2026-02-22T22:55:58.678Z","published_at":"2024-07-01T21:50:42Z","references":["https://osv.dev/vulnerability/GO-2024-2912","https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v","https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2912","url":"https://osv.dev/vulnerability/GO-2024-2912"}],"summary":"Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli"}