GO-2024-2912
Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli
At a glance
- Published
- Updated
- CVE
- CVE-2021-41092
- Aliases
- BIT-docker-cli-2021-41092, GHSA-99pg-grm5-qq3v
Description
Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/docker/cli | introduced 0, fixed 20.10.9+incompatible |
References
- https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v ADVISORY
- https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |