Package
prometheus-3.11
Component
github.com/docker/docker
Latest update
7.2
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
This CVE affects the Docker daemon's bind-mount setup during docker cp and the PUT /containers/{id}/archive endpoint. The package only imports github.com/docker/docker/client and a few api/types packages from this module, used for Docker service discovery (querying a remote daemon to enumerate containers and swarm services for metric scraping). It is a client of a Docker daemon, never a daemon itself; the vulnerable bind-mount handling code is not linked into the binary, so the issue is not reachable.
Status
Impact
This package is no longer supported upstream and has reached its end of life. A version upgrade is required to fix this vulnerability.
Status