Approved changes feed: RSS · Atom

cpe:2.3:a:mobyproject:moby:25.0.5:*:*:*:*:*:*:*

part: a version: 25.0.5 update: *

VendorMobyproject (6ca703fa-9c4f-5fa7-9a39-46916d79f1a4)
ProductMoby (cb4ca465-ffbc-5691-803a-2720b5a527ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/moby/moby purl2cpe 2026-06-01 10:16:15.050105
pkg:rpm/fedora/moby-engine purl2cpe 2026-06-01 10:16:15.050106

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36621 vulnerable 2026-06-08 06:39:45.558074 Details available
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.
Published: 2024-11-29T00:00:00.000Z
Updated: 2024-12-04T17:13:36.018Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.