All vulnerabilities

Servers and applications

GHSA-vp35-85q5-9f25

Container build can leak any path on the host into the container (using Git CVE-2022-39253)

Severity
Low
Published
10 Nov 2022
Last changed
10 Nov 2022
Added to UpHeron
22 Oct 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Docker EngineServers and applications · github:moby/moby
  • Version 2.38.0
  • Version 2.37.3
  • Version 2.36.2
  • Version 2.35.4
All 11 release lines
  • Every version up to 20.10.19
  • Every version up to 2.12.0
  • Every version up to 20.10.13
  • Version 2.31.4
  • Version 2.32.3
  • Version 2.33.4
  • Version 2.34.4
  • Version 2.35.4
  • Version 2.36.2
  • Version 2.37.3
  • Version 2.38.0

References