How many moby github.com/moby/moby/v2 CVEs are in CISA KEV?

None of moby github.com/moby/moby/v2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of moby github.com/moby/moby/v2 are affected?

4 distinct moby github.com/moby/moby/v2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in moby github.com/moby/moby/v2 CVEs?

moby github.com/moby/moby/v2's CVEs most often map to these CWE weakness types: CWE-193 (Off-by-one Error), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-427 (Uncontrolled Search Path Element).

What is the average severity of moby github.com/moby/moby/v2 CVEs?

The average CVSS base score across moby github.com/moby/moby/v2's scored CVEs is 7.6.

moby github.com/moby/moby/v2 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: moby github.com/moby/moby/v2 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

moby github.com/moby/moby/v2 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

moby github.com/moby/moby/v2 has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting moby github.com/moby/moby/v2, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of moby github.com/moby/moby/v2's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of moby github.com/moby/moby/v2's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No moby github.com/moby/moby/v2 CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every moby github.com/moby/moby/v2 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.0.0-beta.143 CVEs
< 2.0.0-beta.82 CVEs

Fixed in

2.0.0-beta.143 CVEs
2.0.0-beta.82 CVEs

Find a version

5 CVEs

Sort

Moby: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-42306
Patch
CWE-367
High · CVSS 7.2
EPSS 0.1% (1th pct)2026-06-12
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568
Patch
CWE-81
Medium · CVSS 6.1
EPSS 0.1% (1th pct)2026-06-12
Docker: `PUT /containers/{id}/archive` executes container binary on the host
CVE-2026-41567
Patch
Workaround
CWE-427
High · CVSS 7.5
EPSS 0.2% (6th pct)2026-06-05
Moby: Off-by-one error in plugin privilege validation
CVE-2026-33997
Patch
CWE-193
High · CVSS 8.4
EPSS 0.4% (32th pct)2026-03-31
Moby: AuthZ plugin bypass with oversized request body
CVE-2026-34040
Patch
CWE-288
High · CVSS 8.8
EPSS 9.1% (95th pct)2026-03-31

Common weakness types

The CWE weakness categories most often found in moby github.com/moby/moby/v2 CVEs. Follow any weakness for its full explanation.

Other moby products

Browse vulnerabilities for other products by moby.

moby34 CVEs github.com/moby/moby18 CVEs buildkit16 CVEs github.com/moby/buildkit9 CVEs hyperkit5 CVEs Docker Engine2 CVEs github.com/moby/go-archive1 CVEs github.com/moby/spdystream

Frequently asked questions

Common questions about moby github.com/moby/moby/v2 vulnerabilities.

How many CVEs does moby github.com/moby/moby/v2 have?: moby github.com/moby/moby/v2 has 5 published CVE records since 2026.
How many moby github.com/moby/moby/v2 CVEs are in CISA KEV?: None of moby github.com/moby/moby/v2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for moby github.com/moby/moby/v2 vulnerabilities?: No moby github.com/moby/moby/v2 CVEs currently have a tracked public exploit in this dataset.
Which versions of moby github.com/moby/moby/v2 are affected?: 4 distinct moby github.com/moby/moby/v2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in moby github.com/moby/moby/v2 CVEs?: moby github.com/moby/moby/v2's CVEs most often map to these CWE weakness types: CWE-193 (Off-by-one Error), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-427 (Uncontrolled Search Path Element).
What is the average severity of moby github.com/moby/moby/v2 CVEs?: The average CVSS base score across moby github.com/moby/moby/v2's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track moby github.com/moby/moby/v2 vulnerabilities

Monitor new moby github.com/moby/moby/v2 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing