github.com/moby/moby v28.5.2+incompatible

Why

• warnVulnerability

  Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

• warnVulnerability

  Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

• warnVulnerability

  Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

• warnVulnerability

  Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

• warnVulnerability

  Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

• warnVulnerability

  Moby has an Off-by-one error in its plugin privilege validation

• warnVulnerability

  Docker: Race condition in docker cp allows bind mount redirection to host path

• warnVulnerability

  Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

• warnVulnerability

  Moby has AuthZ plugin bypass when provided oversized request bodies (fixed in 29.3.1)

• warnVulnerability

  Docker: `PUT /containers/{id}/archive` executes container binary on the host

What the code does

On its own this is weak signal: plenty of honest libraries read files or talk to the network. What PkgFire watches is a release gaining something the one before it did not.