{"action":"Upgrade docker to 29.5.1-r0 or later.","affected":[{"fixed":"29.5.1-r0","introduced":"0"}],"component":"docker","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["29.5.1-r0"],"id":"tcs_01M6H96NBSGDJGEZF9N6SWP8VN","modified_at":"2026-11-03T06:33:02.765979118Z","published_at":"2026-06-05T02:17:13.817Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-41567","https://security.alpinelinux.org/vuln/CVE-2026-41567"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-41567","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-41567"}],"summary":"Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/arch"}