GO-2024-2912
Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2021-41092
- Alias
- BIT-docker-cli-2021-41092, GHSA-99pg-grm5-qq3v
Description
Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/docker/cli | introduced 0, fixed 20.10.9+incompatible |
Références
- https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v ADVISORY
- https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |