Every CVE Search/ Get API key

CVE-2026-92543

Docker Engine insecure-registry fallback via malicious DNS responses

7.6 HighFix available

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.09%Unchanged since Oct 8, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.6

Docker Engine insecure-registry fallback via malicious DNS responses

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-295, CWE-319
Updated
2026-11-02
EUVDEUVD-2026-94484 7.6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
EUVD-2026-94484
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
NVD 7.6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-295, CWE-319
Updated
2026-11-02
OSVALPINE-CVE-2026-92543 7.6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
ALPINE-CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-03
OSV 7.6

Docker Engine insecure-registry fallback via malicious DNS responses

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-295, CWE-319
Updated
2026-11-02
OSVDEBIAN-CVE-2026-92543 7.6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
DEBIAN-CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 9 moreShow less
OSVOESA-2026-4657 7.6

docker security update

Docker is an open source project to build, ship and run any application as a lightweight container.

Security Fix(es):

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)

Record
OESA-2026-4657
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-4719 7.6

docker security update

Docker is an open source project to build, ship and run any application as a lightweight container.

Security Fix(es):

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)

Record
OESA-2026-4719
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-04
OSVOESA-2026-4720 7.6

docker security update

Docker is an open source project to build, ship and run any application as a lightweight container.

Security Fix(es):

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)

Record
OESA-2026-4720
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-04
OSVUBUNTU-CVE-2026-92543 7.6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
UBUNTU-CVE-2026-92543
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVAZL-107195 No score

CVE-2026-92543 affecting package cert-manager for versions less than 1.12.15-15

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
AZL-107195
Updated
2026-11-05
OSVAZL-107315 No score

CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
AZL-107315
Updated
2026-11-05
OSVAZL-107333 No score

CVE-2026-92543 affecting package docker-cli for versions less than 25.0.7-6

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
AZL-107333
Updated
2026-11-05
OSVAZL-107351 No score

CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
AZL-107351
Updated
2026-11-05
OSVAZL-107748 No score

CVE-2026-92543 affecting package moby-engine 25.0.18-1

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Record
AZL-107748
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
docker
Alpine:v3.24
 before 29.8.2-r0
29.8.2-r0
cert-manager
Azure Linux:3
 before 1.12.15-15
1.12.15-15
docker-buildx
Azure Linux:3
 before 0.14.0-19
0.14.0-19
docker-cli
Azure Linux:3
 before 25.0.7-6
25.0.7-6
docker-compose
Azure Linux:3
 before 2.27.0-16
2.27.0-16
moby-engine
Azure Linux:3
 through 25.0.18-1 None known
docker
Alpaquita:stream
 24.0.2-r0 up to 29.8.2-r0
29.8.2-r0
docker.io
Debian:12
 All versions, plus listed versions
20.10.24+dfsg1-120.10.24+dfsg1-1+deb12u120.10.25+dfsg1-120.10.25+dfsg1-220.10.25+dfsg1-3
Show 42 moreShow less
20.10.25+dfsg1-426.1.4+dfsg1-126.1.4+dfsg1-226.1.4+dfsg1-326.1.4+dfsg1-426.1.4+dfsg1-526.1.4+dfsg1-626.1.4+dfsg1-726.1.4+dfsg1-826.1.4+dfsg1-926.1.4+dfsg2-126.1.4+dfsg3-126.1.5+dfsg1-126.1.5+dfsg1-1026.1.5+dfsg1-226.1.5+dfsg1-326.1.5+dfsg1-426.1.5+dfsg1-526.1.5+dfsg1-626.1.5+dfsg1-726.1.5+dfsg1-826.1.5+dfsg1-927.5.1+dfsg1-127.5.1+dfsg1-227.5.1+dfsg2-127.5.1+dfsg3-127.5.1+dfsg3-227.5.1+dfsg3-327.5.1+dfsg3-427.5.1+dfsg3-527.5.1+dfsg3-627.5.1+dfsg4-127.5.1+dfsg4-228.5.2+dfsg1-128.5.2+dfsg2-128.5.2+dfsg3-128.5.2+dfsg3-228.5.2+dfsg4-128.5.2+dfsg4-228.5.2+dfsg4-328.5.2+dfsg4-428.5.2+dfsg4-5
 None known
docker.io
Debian:13
 All versions, plus listed versions
26.1.5+dfsg1-1026.1.5+dfsg1-926.1.5+dfsg1-9+deb13u127.5.1+dfsg1-127.5.1+dfsg1-2
Show 18 moreShow less
27.5.1+dfsg2-127.5.1+dfsg3-127.5.1+dfsg3-227.5.1+dfsg3-327.5.1+dfsg3-427.5.1+dfsg3-527.5.1+dfsg3-627.5.1+dfsg4-127.5.1+dfsg4-228.5.2+dfsg1-128.5.2+dfsg2-128.5.2+dfsg3-128.5.2+dfsg3-228.5.2+dfsg4-128.5.2+dfsg4-228.5.2+dfsg4-328.5.2+dfsg4-428.5.2+dfsg4-5
 None known
docker.io
Debian:14
 All versions, plus listed versions
26.1.5+dfsg1-1026.1.5+dfsg1-927.5.1+dfsg1-127.5.1+dfsg1-227.5.1+dfsg2-1
Show 17 moreShow less
27.5.1+dfsg3-127.5.1+dfsg3-227.5.1+dfsg3-327.5.1+dfsg3-427.5.1+dfsg3-527.5.1+dfsg3-627.5.1+dfsg4-127.5.1+dfsg4-228.5.2+dfsg1-128.5.2+dfsg2-128.5.2+dfsg3-128.5.2+dfsg3-228.5.2+dfsg4-128.5.2+dfsg4-228.5.2+dfsg4-328.5.2+dfsg4-428.5.2+dfsg4-5
 None known
Show 15 moreShow less
Affected packages
PackageAffectedFixed
docker
openEuler:22.03-LTS-SP4
 before engine-18.09.0-355.oe2203sp4
engine-18.09.0-355.oe2203sp4
docker
openEuler:24.03-LTS-SP1
 before engine-18.09.0-358.oe2403sp1
engine-18.09.0-358.oe2403sp1
docker
openEuler:24.03-LTS-SP3
 before engine-18.09.0-358.oe2403sp3
engine-18.09.0-358.oe2403sp3
docker.io
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.6.2~dfsg1-1ubuntu41.10.2-0ubuntu31.10.2-0ubuntu41.10.3-0ubuntu11.10.3-0ubuntu4
Show 19 moreShow less
1.10.3-0ubuntu51.10.3-0ubuntu61.11.2-0ubuntu5~16.041.12.1-0ubuntu13~16.04.11.12.3-0ubuntu4~16.04.21.12.6-0ubuntu1~16.04.11.13.1-0ubuntu1~16.04.217.03.2-0ubuntu2~16.04.118.06.1-0ubuntu1~16.04.218.06.1-0ubuntu1.2~16.04.118.09.2-0ubuntu1~16.04.118.09.5-0ubuntu1~16.04.218.09.7-0ubuntu1~16.04.118.09.7-0ubuntu1~16.04.418.09.7-0ubuntu1~16.04.518.09.7-0ubuntu1~16.04.618.09.7-0ubuntu1~16.04.718.09.7-0ubuntu1~16.04.9+esm118.09.7-0ubuntu1~16.04.9+esm2
 None known
docker.io
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.13.1-0ubuntu617.03.2-0ubuntu117.03.2-0ubuntu317.03.2-0ubuntu517.12.1-0ubuntu1
Show 22 moreShow less
18.06.1-0ubuntu1~18.04.118.06.1-0ubuntu1.2~18.04.118.09.2-0ubuntu1~18.04.118.09.5-0ubuntu1~18.04.218.09.7-0ubuntu1~18.04.118.09.7-0ubuntu1~18.04.318.09.7-0ubuntu1~18.04.419.03.6-0ubuntu1~18.04.119.03.6-0ubuntu1~18.04.219.03.6-0ubuntu1~18.04.320.10.2-0ubuntu1~18.04.220.10.2-0ubuntu1~18.04.320.10.7-0ubuntu1~18.04.120.10.7-0ubuntu1~18.04.220.10.7-0ubuntu5~18.04.220.10.7-0ubuntu5~18.04.320.10.12-0ubuntu2~18.04.120.10.21-0ubuntu1~18.04.220.10.21-0ubuntu1~18.04.320.10.21-0ubuntu1~18.04.3+esm120.10.21-0ubuntu1~18.04.3+esm220.10.21-0ubuntu1~18.04.3+esm3
 None known
docker.io
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
19.03.2-0ubuntu119.03.6-0ubuntu119.03.8-0ubuntu119.03.8-0ubuntu1.20.0419.03.8-0ubuntu1.20.04.1
Show 15 moreShow less
19.03.8-0ubuntu1.20.04.220.10.2-0ubuntu1~20.04.220.10.2-0ubuntu1~20.04.320.10.7-0ubuntu1~20.04.120.10.7-0ubuntu1~20.04.220.10.7-0ubuntu5~20.04.120.10.7-0ubuntu5~20.04.220.10.12-0ubuntu2~20.04.120.10.21-0ubuntu1~20.04.120.10.21-0ubuntu1~20.04.220.10.21-0ubuntu1~20.04.420.10.21-0ubuntu1~20.04.520.10.21-0ubuntu1~20.04.620.10.21-0ubuntu1~20.04.6+esm120.10.21-0ubuntu1~20.04.6+esm2
 None known
docker.io-app
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
20.10.25-0ubuntu1~20.04.120.10.25-0ubuntu1~20.04.224.0.5-0ubuntu1~20.04.124.0.7-0ubuntu2~20.04.126.1.3-0ubuntu1~20.04.126.1.3-0ubuntu1~20.04.1+esm126.1.3-0ubuntu1~20.04.1+esm2
 None known
docker.io
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
20.10.7-0ubuntu520.10.7-0ubuntu720.10.12-0ubuntu120.10.12-0ubuntu220.10.12-0ubuntu3
Show 11 moreShow less
20.10.12-0ubuntu3+gke1.24.120.10.12-0ubuntu420.10.21-0ubuntu1~22.04.220.10.21-0ubuntu1~22.04.320.10.21-0ubuntu1~22.04.520.10.21-0ubuntu1~22.04.620.10.21-0ubuntu1~22.04.720.10.21-0ubuntu1~22.04.7+esm120.10.21-0ubuntu1~22.04.7+esm220.10.21-0ubuntu1~22.04.820.10.21-0ubuntu1~22.04.8+esm1
 None known
docker.io-app
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
20.10.25-0ubuntu1~22.04.120.10.25-0ubuntu1~22.04.224.0.5-0ubuntu1~22.04.124.0.7-0ubuntu2~22.04.126.1.3-0ubuntu1~22.04.1
Show 6 moreShow less
26.1.3-0ubuntu1~22.04.1+esm127.5.1-0ubuntu3~22.04.127.5.1-0ubuntu3~22.04.228.2.2-0ubuntu1~22.04.129.1.3-0ubuntu3~22.04.129.1.3-0ubuntu3~22.04.2
 None known
docker.io
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
20.10.24+dfsg1-1ubuntu220.10.25+dfsg1-2ubuntu120.10.25+dfsg1-2ubuntu1+esm120.10.25+dfsg1-2ubuntu1+esm220.10.25+dfsg1-2ubuntu1.24.04.120.10.25+dfsg1-2ubuntu1.24.04.1+esm1
 None known
docker.io-app
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
24.0.5-0ubuntu124.0.7-0ubuntu124.0.7-0ubuntu224.0.7-0ubuntu324.0.7-0ubuntu4
Show 8 moreShow less
24.0.7-0ubuntu4.126.1.3-0ubuntu1~24.04.126.1.3-0ubuntu1~24.04.1+esm127.5.1-0ubuntu3~24.04.127.5.1-0ubuntu3~24.04.228.2.2-0ubuntu1~24.04.129.1.3-0ubuntu3~24.04.129.1.3-0ubuntu3~24.04.2
 None known
docker.io
Ubuntu:26.10
 All versions, plus listed versions
27.5.1+dfsg4-2ubuntu128.5.2+dfsg4-5ubuntu1
 None known
docker.io-app
Ubuntu:26.10
 All versions, plus listed versions
29.1.3-0ubuntu429.1.3-0ubuntu529.1.3-0ubuntu629.7.2-0ubuntu1
 None known
docker.io
Ubuntu:26.04:LTS
 All versions, plus listed versions
26.1.5+dfsg1-9ubuntu127.5.1+dfsg4-1ubuntu127.5.1+dfsg4-2ubuntu1
 None known
docker.io-app
Ubuntu:26.04:LTS
 All versions, plus listed versions
28.2.2-0ubuntu129.1.2-0ubuntu129.1.3-0ubuntu129.1.3-0ubuntu229.1.3-0ubuntu329.1.3-0ubuntu429.1.3-0ubuntu4.1
 None known

History

History
RecordedChangedSources
affected, aliases, facts, referencesOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-92543 is a high vulnerability (CVSS 7.6) in Docker Engine, published October 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.09%, the 0th percentile. Fixed in docker 29.8.2-r0.

References

Show 5 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open