gitlab-runner-18.2
Chainguard
5.2
CVSS V3
Status
Impact
It is not currently possible to upgrade the version of the docker dependency due to changes in the signature of various functions. The upstream maintainers will need to make code changes in order to be able to remediate this CVE
Status
Status
Impact
This vulnerability affects Docker Engine (Moby) versions <= 25.0.12 where firewalld reload removes Docker's iptables rules that isolate containers in different bridge networks. Upstream maintainers must cut a release with the fix. References: 25.x backport PR: https://github.com/moby/moby/pull/50445 28.x backport PR: https://github.com/moby/moby/pull/50506