Package
datadog-agent-7.83
Component
github.com/docker/docker
Latest update
6.8
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
CVE-2026-33997 (GHSA-pxq6-2prw-chj9) is an off-by-one in Moby's plugin-privilege comparison, fixed upstream in moby/moby release docker-v29.3.1. The pinned github.com/docker/docker pseudo-version (v28.5.3-...-31a1689cb0a1) already contains that patched comparison logic, backported ahead of an official tag. The pseudo-version string sorts below 29.3.1 and over-matches the CVE's affected range, but the vulnerable code path is not present in the code actually shipped.
Status