ZeroDay Findings
Sign inSign up

Technology hubs · Docker

Docker security fix timeline

Public commits from moby/moby whose messages cite a vulnerability or a security fix. Patch text is not stored.

Docker hubVulnerability catalog

53 security-fix timeline events

  1. Oct 13, 2026 · CVE-2026-95839

    Dockerfile: update to containerd v2.4.2

    Dockerfile: update to containerd v2.4.2 Security Updates: - [CVE-2026-95839](https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f) - [GHSA-8647-2jxj-p2rc](https://github.com/containerd/containerd/security/advisories/GHSA-8647-2jxj-p2rc) - [GHSA-hc94…

    CVE-2026-95839https://github.com/moby/moby/commit/a57101f798597954100beb8bdefdfe30a482b439

  2. Oct 13, 2026 · CVE-2026-95839

    vendor: github.com/containerd/containerd/v2 v2.4.2

    vendor: github.com/containerd/containerd/v2 v2.4.2 Security Updates: - [CVE-2026-95839](https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f) - [GHSA-8647-2jxj-p2rc](https://github.com/containerd/containerd/security/advisories/GHSA-8647-2jxj-p2rc) -…

    CVE-2026-95839https://github.com/moby/moby/commit/5850ffab4b87297f27c8fb09183dc97965f2f6a9

  3. Oct 8, 2026 · CVE-2026-97032

    Update to go1.26.9

    Update to go1.26.9 These releases include 15 security fixes following the security policy: - net/http: HTTP/2 server crash due to HPACK encoder race HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because th…

    CVE-2026-97032https://github.com/moby/moby/commit/3dcf5047a1754f38dfa7e97e4fd156de4aba3808

  4. Oct 5, 2026 · CVE-2026-10722

    vendor: github.com/cilium/ebpf v0.22.0

    vendor: github.com/cilium/ebpf v0.22.0 fix Kernel 7.1 compatibility In kernel 7.1 the BTF header was extended to introduce a new feature called BTF layout. This change caused our BTF parser to fail when parsing vmlinux for this kernel. This has been fixed in this latest releas…

    CVE-2026-10722https://github.com/moby/moby/commit/0095228a62c5b32cb20cafc9d2a262f1447dc3c5

  5. Sep 25, 2026 · CVE-2026-53493

    Dockerfile: update to containerd v2.4.1

    Dockerfile: update to containerd v2.4.1 includes a fix for CVE-2026-53493 / [GHSA-pg57-6jwg-q645] release-notes: https://github.com/containerd/containerd/releases/tag/v2.4.1 full diff: https://github.com/containerd/containerd/compare/v2.4.0...v2.4.1 [GHSA-pg57-6jwg-q645]: htt…

    CVE-2026-53493https://github.com/moby/moby/commit/43d5fafdf3fa85839df40627794ccb431ebf3055

  6. Sep 25, 2026 · CVE-2026-53493

    vendor: github.com/containerd/containerd/v2 v2.4.1

    vendor: github.com/containerd/containerd/v2 v2.4.1 includes a fix for CVE-2026-53493 / [GHSA-pg57-6jwg-q645] release-notes: https://github.com/containerd/containerd/releases/tag/v2.4.1 full diff: https://github.com/containerd/containerd/compare/v2.4.0...v2.4.1 [GHSA-pg57-6jwg…

    CVE-2026-53493https://github.com/moby/moby/commit/10dd66e284cabc12c1d6c6b7507a23af02cb3e67

  7. Sep 5, 2026 · CVE-2026-53495

    Dockerfile: update to containerd v2.3.5

    Dockerfile: update to containerd v2.3.5 Security Updates - [**CVE-2026-53495**](https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv) - [**GHSA-rp3h-jf77-q9p4**](https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4) rele…

    CVE-2026-53495https://github.com/moby/moby/commit/4724c82dd7890976ef478813b8cc843b3f979a7c

  8. Sep 5, 2026 · CVE-2026-53495

    vendor: github.com/containerd/containerd/v2 v2.3.5

    vendor: github.com/containerd/containerd/v2 v2.3.5 full diff: https://github.com/containerd/containerd/compare/v2.3.4...v2.3.5 Security Updates - [**CVE-2026-53495**](https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv) - [**GHSA-rp3h-jf77-q9p4**]…

    CVE-2026-53495https://github.com/moby/moby/commit/fdf0138b8468c0d1d03dafe43a38063dd8cc5e95

  9. Sep 2, 2026 · CVE-2026-56855

    vendor: golang.org/x/crypto v0.56.0

    vendor: golang.org/x/crypto v0.56.0 full diff: https://github.com/golang/crypto/compare/v0.55.0...v0.56.0 We have tagged version v0.56.0 of golang.org/x/crypto in order to address the following security issues: - ssh: prevent DoS on deadlocked established channel Previously,…

    CVE-2026-56855https://github.com/moby/moby/commit/b8a620d256a93b9faf05fcb9dbb014930b45b896

  10. Aug 13, 2026 · CVE-2026-56865

    vendor: golang.org/x/mod v0.40.0

    vendor: golang.org/x/mod v0.40.0 - x/mod/sumdb/tlog: fix transparency log tile verification bypass A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled…

    CVE-2026-56865https://github.com/moby/moby/commit/cd6ede1057e4e5d94925edb1938014b02a35901d