{"action":"Upgrade github.com/moby/moby to 20.10.9+incompatible or later.","affected":[{"fixed":"20.10.9+incompatible","introduced":"0"}],"component":"github.com/moby/moby","cve_ids":["CVE-2021-41089"],"ecosystem":"Go","epss":0.0029,"exploited":false,"fixed_versions":["20.10.9+incompatible"],"ghsa_id":"GHSA-v994-f8vw-g7j4","id":"tcs_01M5KG3NC2GA4RRXTXCCNC20NB","modified_at":"2026-02-04T03:21:51.972234Z","published_at":"2024-06-14T13:41:08Z","references":["https://osv.dev/vulnerability/GO-2024-2913","https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4","https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2913#Go/github.com/moby/moby","url":"https://osv.dev/vulnerability/GO-2024-2913"}],"summary":"Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker"}