PT-2026-29934 · Go · Github.Com/Docker/Docker+2

Published 2026-04-02 · Updated 2026-04-02

OSV

Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

Related Identifiers

GO-2026-4887

Affected Products

Github.Com/Docker/Docker

Github.Com/Moby/Moby

Github.Com/Moby/Moby/V2

References · 5

• https://osv.dev/vulnerability/GO-2026-4887 · Vendor Advisory
• https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq · Note
• https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38 · Note
• https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2 · Note
• https://docs.docker.com/engine/extend/plugins_authorization · Note