CVE-2026-34040
HighAdvisory
Published 27 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.091
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 587
- of 17,787 indexed, latest versions
- Container images
- 578
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
Moby has AuthZ plugin bypass when provided oversized request bodies
Carried by container images the latest versions of 587 of 17,787 indexed charts deploy, on 578 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more | 29.3.1 | 30 |
| docker.iodeb | 20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13 | 26.1.5+dfsg1-9+deb13u1 | 2 |
| github.com/ | v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more | no fix listed | 553 |
Charts affected
587 by stars
Container images carrying it
578 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 7bfe1c07bd9b | github.com/ | no fix listed | 1 |
| ghcr.io/ | ec36422b09af | github.com/ | no fix listed | 1 |
| ghcr.io/ | 42574f512837 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9518de37eed5 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e24894e32cbc | github.com/ | no fix listed | 1 |
| ghcr.io/ | cce8ff866f60 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b5ade0d9cc6b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0cca6760763a | github.com/ | no fix listed | 1 |
| ghcr.io/ | 560a16a56d4e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9c73f1841ebc | github.com/ | no fix listed | 1 |
| ghcr.io/ | a61c7022abcf | github.com/ | no fix listed | 1 |
| ghcr.io/ | 832a32779e6d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 185d2eebc60c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 63f7eaf5aa8a | github.com/ | no fix listed | 1 |
| ghcr.io/ | c62e3347611c | github.com/ | no fix listed | 1 |
| ghcr.io/ | dd8a35d50c2d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5c109914ff73 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5dfa86b6451f | github.com/ | no fix listed | 1 |
| ghcr.io/ | b69bcdaa8492 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 84f70425f4dd | github.com/ | no fix listed | 1 |
| ghcr.io/ | 45e744fc623f | github.com/ | no fix listed | 1 |
| ghcr.io/ | ef92da4621e6 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b065ec5a5239 | github.com/ | no fix listed | 1 |
| ghcr.io/ | df917c5a7e54 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7fbc6855c8b3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 17369c4cd390 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 056f0953763d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9c7bc0f9bb35 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c379e66246be | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | github.com/ | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | github.com/ | no fix listed | 1 |
| ghcr.io/ | c0c8d53df9f3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 79412399f301 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 14450f52a708 | github.com/ | no fix listed | 1 |
| ghcr.io/ | d422a9ebd4a2 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6c17297f9098 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | no fix listed | 1 |
| ghcr.io/ | a6d5abe94706 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 590e50477b76 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5e331c925091 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 79b81912f1fb | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3776500fde82 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6d6794f45f3e | github.com/ | no fix listed | 1 |
| ghcr.io/ | adc0eeb4dd05 | github.com/ | no fix listed | 1 |
| ghcr.io/ | aab0c99d313f | github.com/ | no fix listed | 1 |
| ghcr.io/ | c79b2e64a211 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 62517726d0c4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3a98245a7667 | github.com/ | no fix listed | 1 |