moby-cli vulnerabilities (Azure Linux)

10 vulnerabilities.

• moby-cli Azure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure CVE-2025-11065 Fix available 5.3 MediumAugust 21, 2025
• moby-cli Azure Linux Moby Race Condition vulnerability CVE-2024-36623 Fix available 8.1 HighNovember 29, 2024
• moby-cli Azure Linux HTTP/2 CONTINUATION flood in net/http CVE-2023-45288 Public exploitFix available EPSS 92.0% 7.5 HighMarch 27, 2024
• moby-cli Azure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf CVE-2024-24786 Fix available 7.5 HighMarch 5, 2024
• moby-cli Azure Linux BuildKit interactive containers API does not validate entitlements check CVE-2024-23653 Public exploitFix available 9.8 CriticalJanuary 31, 2024
• moby-cli Azure Linux Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• moby-cli Azure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• moby-cli Azure Linux Excessive memory growth in net/http and golang.org/x/net/http2 CVE-2022-41717 Public exploitFix available 5.3 MediumDecember 8, 2022
• moby-cli Azure Linux Uncontrolled Resource Consumption in promhttp CVE-2022-21698 Fix available 7.5 HighFebruary 15, 2022
• moby-cli Azure Linux golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021