Mobyproject vulnerabilities
We track 4 vulnerabilities in Mobyproject products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2026.
Latest Mobyproject vulnerabilities
- 7.2 High severity
moby: UNIX Symbolic Link (Symlink) Following
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirec
- 8.1 High severity
Moby: Concurrent Execution using Shared Resource with Improper Synchronization
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
- 7.5 High severity
moby: Incorrect Resource Transfer Between Spheres
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and g
- 9.8 Critical severity
buildkit: Incorrect Authorization
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It wa