Published 27 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.091
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
2 of 3
affected packages
Moby has AuthZ plugin bypass when provided oversized request bodies
Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.
Affected package
Affected versions
Fixed in
Images
github.com/moby/mobygolang
v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more
29.3.1
30
docker.iodeb
20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13
26.1.5+dfsg1-9+deb13u1
2
github.com/docker/dockergolang
v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more
openebsopenebsOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
mesherymesheryOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
ngrok-operatorngrokOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
codefreshcodefresh-onpremOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
ilumilumOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
codercoderOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository