/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-pcgm-jvq3-4hj4

Published

Last updated

https://images.chainguard.dev/security/CGA-pcgm-jvq3-4hj4
Package

gitlab-runner-18.2

Repository

Chainguard

Latest Update
Not affected
Aliases
  • CVE-2024-36623
  • GHSA-gh5c-3h97-2f3q

Severity

8.1

High

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-36623

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

This vulnerability affects github.com/docker/docker (also known as github.com/moby/moby) versions up to v25.0.4. The version currently in use is v25.0.6, which already includes the patch: https://github.com/moby/moby/commit/8e3bcf19748838b30e34d612832d1dc9d90363b8. However, the CVE detection appears to be incorrectly triggered due to a version parsing mismatch — likely because the module version includes a +incompatible suffix.


Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing