id: GO-2024-2914
modules:
    - module: github.com/docker/docker
      versions:
        - fixed: 20.10.11+incompatible
      vulnerable_at: 20.10.10+incompatible
    - module: github.com/moby/moby
      versions:
        - fixed: 20.10.11+incompatible
      vulnerable_at: 20.10.10+incompatible
summary: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker
ghsas:
    - GHSA-xmmx-7jpf-fx42
related:
    - CVE-2021-41190
references:
    - advisory: https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42
notes:
    - could not locate fix commit
source:
    id: GHSA-xmmx-7jpf-fx42
    created: 2024-07-01T14:25:08.035766-04:00
review_status: REVIEWED