{"id":138523731,"number":"v28.2.0-rc.2+incompatible","published_at":"2025-05-22T12:13:50.000Z","licenses":null,"integrity":null,"status":null,"download_url":"https://proxy.golang.org/cached-only/github.com/docker/docker/@v/v28.2.0-rc.2+incompatible.zip","registry_url":"https://pkg.go.dev/github.com/docker/docker@v28.2.0-rc.2+incompatible","documentation_url":"https://pkg.go.dev/github.com/docker/docker@v28.2.0-rc.2+incompatible#section-documentation","install_command":"go get github.com/docker/docker@v28.2.0-rc.2+incompatible","immutable":null,"metadata":{},"created_at":"2025-05-25T03:31:37.930Z","updated_at":"2025-05-25T03:31:37.930Z","purl":"pkg:golang/github.com/docker/docker@v28.2.0-rc.2%2Bincompatible","related_tag":null,"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdocker%2Fdocker/versions/v28.2.0-rc.2+incompatible","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdocker%2Fdocker/versions/v28.2.0-rc.2+incompatible/codemeta","dependencies":[],"advisories":[{"uuid":"GSA_kwCzR0hTQS1yZzJ4LTM3YzMtdzJyaM4ABXBb","identifiers":["GHSA-rg2x-37c3-w2rh","CVE-2026-42306"],"url":"https://github.com/advisories/GHSA-rg2x-37c3-w2rh","title":"Docker: Race condition in docker cp allows bind mount redirection to host path","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS12cDYyLTg4cDctcXFmNc4ABXBa","identifiers":["GHSA-vp62-88p7-qqf5","CVE-2026-41568"],"url":"https://github.com/advisories/GHSA-vp62-88p7-qqf5","title":"Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS14ODZmLTV4dzItZm0ycs4ABXBV","identifiers":["GHSA-x86f-5xw2-fm2r","CVE-2026-41567"],"url":"https://github.com/advisories/GHSA-x86f-5xw2-fm2r","title":"Docker: `PUT /containers/{id}/archive` executes container binary on the host","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS1weHE2LTJwcnctY2hqOc4ABUYa","identifiers":["GHSA-pxq6-2prw-chj9","CVE-2026-33997"],"url":"https://github.com/advisories/GHSA-pxq6-2prw-chj9","title":"Moby has an Off-by-one error in its plugin privilege validation","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":[]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdocker%2Fdocker"}