CVE-2026-34040
HighAdvisory
Published 27 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.091
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 587
- of 17,787 indexed, latest versions
- Container images
- 578
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
Moby has AuthZ plugin bypass when provided oversized request bodies
Carried by container images the latest versions of 587 of 17,787 indexed charts deploy, on 578 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more | 29.3.1 | 30 |
| docker.iodeb | 20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13 | 26.1.5+dfsg1-9+deb13u1 | 2 |
| github.com/ | v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more | no fix listed | 553 |
Charts affected
587 by stars
Container images carrying it
578 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gcr.io/ | 135327c978de | github.com/ | no fix listed | 1 |
| gcr.io/ | e6c562b5e983 | github.com/ | no fix listed | 1 |
| gcr.io/ | f40e65878e25 | github.com/ | no fix listed | 1 |
| gcr.io/ | 6efe04ba4e06 | github.com/ | no fix listed | 1 |
| gcr.io/ | 8d4576f7b98f | github.com/ | no fix listed | 1 |
| gcr.io/ | 4e7a52dd1f14 | github.com/ | no fix listed | 1 |
| gcr.io/ | 30ce73388ae5 | github.com/ | no fix listed | 1 |
| gcr.io/ | 53d9aa4d2c7a | github.com/ | no fix listed | 1 |
| gcr.io/ | 75cfdcfa050a | github.com/ | no fix listed | 1 |
| gcr.io/ | 98a2cc7fd62e | github.com/ | no fix listed | 1 |
| gcr.io/ | b2cd45b8a8a4 | github.com/ | no fix listed | 1 |
| gcr.io/ | bac158dfb0c7 | github.com/ | no fix listed | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | no fix listed | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 459010a02aff | github.com/ | no fix listed | 1 |
| ghcr.io/ | 81f6007abb4e | github.com/ | 29.3.1 | 1 |
| ghcr.io/ | 36ce246d884e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 67ffb0309acb | github.com/ | no fix listed | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ | no fix listed | 1 |
| ghcr.io/ | cb5f24732197 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 4c708ecf7dc4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5cf1e5709820 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3490d9900af1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2cef2a3f97da | github.com/ | no fix listed | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e02a8bd9e2c3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3ee1b62aa111 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a058034ca006 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0d28dbd95b03 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 69b1d3c09cfa | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9608d9b51452 | github.com/ | no fix listed | 1 |
| ghcr.io/ | cf78fdf7403a | github.com/ | no fix listed | 1 |
| ghcr.io/ | fb609bc264d9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 11cdbbc479b3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 448cb346b12c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8a8ec8d4c9ea | github.com/ | no fix listed | 1 |
| ghcr.io/ | e7f9e8f1d565 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 091b906a0b13 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8bc853c7414c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9e48285bb44c | github.com/ | no fix listed | 1 |
| ghcr.io/ | bdb31f3121a2 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 40b804fce7f9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2ce077d3d02d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 59f75504c5d4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a6ae5aff81ce | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9853bb613cd0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | df70104803cb | github.com/ | no fix listed | 1 |