[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-41089":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":23,"downstream":24,"duplicates":55,"related":56,"reserved_at":9,"published_at":73,"modified_at":74,"state":75,"summary":76,"references_raw":85,"kevs":138,"epss":139,"epss_history":142,"metrics":407,"affected":426},"CVE-2021-41089","Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-281","Improper Preservation of Permissions","The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.","weakness","Draft","Base",[],[],[21,22],"GHSA-v994-f8vw-g7j4","GO-2024-2913",[],[25,27,29,31,33,35,37,39,41,43,45,47,49,51,53],{"_key":26},"SUSE-SU-2021:3336-1",{"_key":28},"SUSE-SU-2021:3506-1",{"_key":30},"SUSE-SU-2022:0213-1",{"_key":32},"SUSE-SU-2022:0334-1",{"_key":34},"SUSE-SU-2025:03540-1",{"_key":36},"UBUNTU-CVE-2021-41089",{"_key":38},"OPENSUSE-SU-2021:1404-1",{"_key":40},"OPENSUSE-SU-2021:3506-1",{"_key":42},"OPENSUSE-SU-2022:0334-1",{"_key":44},"OPENSUSE-SU-2024:11579-1",{"_key":46},"SUSE-SU-2025:03545-1",{"_key":48},"OPENSUSE-SU-2025:15589-1",{"_key":50},"MGASA-2021-0500",{"_key":52},"DEBIAN-CVE-2021-41089",{"_key":54},"USN-5103-1",[],[57,58,59,60,61,62,63,64,65,66,67,68,69,71],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":70},"CGA-CMVM-WQR5-V4H3",{"_key":72},"CGA-VG3J-3Q98-VG3P","2021-10-04T20:20:15.000Z","2024-08-04T02:59:31.512Z","Modified",{"cisa_kev":77,"cisa_ransomware":77,"cisa_vendor":9,"epss_severity":78,"epss_score":79,"severity":80,"severity_score":81,"severity_version":82,"severity_source":83,"severity_vector":84,"severity_status":75},false,"low",0.00031,"medium",6.3,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",[86,96,103,109,113,117,121,126,130,134],{"url":87,"sources":88,"tags":91},"https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4",[89,83,90],"cve.org","osv_go",[92,93,94,95],"X Refsource CONFIRM","Third Party Advisory","WEB","Advisory",{"url":97,"sources":98,"tags":99},"https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a",[89,83,90],[100,101,93,94,102],"X Refsource MISC","Patch","FIX",{"url":104,"sources":105,"tags":106},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/",[89,83],[107,108],"Vendor Advisory","X Refsource FEDORA",{"url":110,"sources":111,"tags":112},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/",[89,83],[107,108],{"url":114,"sources":115,"tags":116},"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf",[89,83,90],[92,94],{"url":118,"sources":119,"tags":120},"https://nvd.nist.gov/vuln/detail/CVE-2021-41089",[90],[95],{"url":122,"sources":123,"tags":124},"https://github.com/moby/moby",[90],[125],"PACKAGE",{"url":127,"sources":128,"tags":129},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB",[90],[94],{"url":131,"sources":132,"tags":133},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB",[90],[94],{"url":135,"sources":136,"tags":137},"https://pkg.go.dev/vuln/GO-2024-2913",[90],[94],[],{"date":140,"score":79,"percentile":141},"2026-06-04",0.09195,[143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,315,318,321,324,327,330,333,336,339,342,344,347,350,353,356,358,361,364,367,369,372,375,378,381,383,386,388,391,393,396,398,401,404],{"date":144,"score":79,"percentile":145},"2025-11-04",0.07674,{"date":147,"score":79,"percentile":148},"2025-11-05",0.07729,{"date":150,"score":79,"percentile":151},"2025-11-06",0.0784,{"date":153,"score":79,"percentile":154},"2025-11-07",0.0787,{"date":156,"score":79,"percentile":157},"2025-11-08",0.07883,{"date":159,"score":79,"percentile":160},"2025-11-09",0.07847,{"date":162,"score":79,"percentile":163},"2025-11-10",0.07805,{"date":165,"score":79,"percentile":166},"2025-11-11",0.07796,{"date":168,"score":79,"percentile":169},"2025-11-12",0.07791,{"date":171,"score":79,"percentile":172},"2025-11-13",0.07827,{"date":174,"score":79,"percentile":175},"2025-11-14",0.07893,{"date":177,"score":79,"percentile":178},"2025-11-15",0.0793,{"date":180,"score":79,"percentile":181},"2025-11-16",0.07943,{"date":183,"score":79,"percentile":184},"2025-11-17",0.07933,{"date":186,"score":187,"percentile":188},"2025-11-18",0.00071,0.17866,{"date":190,"score":187,"percentile":191},"2025-11-19",0.17884,{"date":193,"score":187,"percentile":194},"2025-11-20",0.17857,{"date":196,"score":79,"percentile":197},"2025-11-21",0.0806,{"date":199,"score":79,"percentile":200},"2025-11-22",0.08025,{"date":202,"score":79,"percentile":203},"2025-11-23",0.08023,{"date":205,"score":79,"percentile":206},"2025-11-24",0.08015,{"date":208,"score":79,"percentile":209},"2025-11-25",0.08006,{"date":211,"score":79,"percentile":212},"2025-11-26",0.08011,{"date":214,"score":79,"percentile":215},"2025-11-27",0.0801,{"date":217,"score":79,"percentile":218},"2025-11-28",0.07994,{"date":220,"score":79,"percentile":221},"2025-11-29",0.08018,{"date":223,"score":79,"percentile":224},"2025-11-30",0.08014,{"date":226,"score":79,"percentile":227},"2025-12-01",0.08046,{"date":229,"score":79,"percentile":230},"2025-12-02",0.08063,{"date":232,"score":79,"percentile":233},"2025-12-03",0.08087,{"date":235,"score":79,"percentile":236},"2025-12-04",0.08067,{"date":238,"score":239,"percentile":240},"2025-12-05",0.00033,0.09065,{"date":242,"score":239,"percentile":243},"2025-12-06",0.0908,{"date":245,"score":239,"percentile":246},"2025-12-07",0.09087,{"date":248,"score":239,"percentile":249},"2025-12-08",0.09091,{"date":251,"score":239,"percentile":252},"2025-12-09",0.09156,{"date":254,"score":239,"percentile":255},"2025-12-10",0.09234,{"date":257,"score":239,"percentile":258},"2025-12-11",0.09271,{"date":260,"score":239,"percentile":261},"2025-12-12",0.09295,{"date":263,"score":239,"percentile":264},"2025-12-13",0.093,{"date":266,"score":239,"percentile":267},"2025-12-14",0.09291,{"date":269,"score":239,"percentile":270},"2025-12-15",0.09206,{"date":272,"score":239,"percentile":273},"2025-12-16",0.09192,{"date":275,"score":239,"percentile":276},"2025-12-17",0.09282,{"date":278,"score":239,"percentile":279},"2025-12-18",0.09337,{"date":281,"score":239,"percentile":282},"2025-12-19",0.09344,{"date":284,"score":239,"percentile":285},"2025-12-20",0.09339,{"date":287,"score":239,"percentile":288},"2025-12-21",0.09318,{"date":290,"score":239,"percentile":291},"2025-12-22",0.09288,{"date":293,"score":239,"percentile":294},"2025-12-23",0.09274,{"date":296,"score":239,"percentile":297},"2025-12-24",0.09281,{"date":299,"score":239,"percentile":300},"2025-12-25",0.09365,{"date":302,"score":239,"percentile":303},"2025-12-26",0.09351,{"date":305,"score":239,"percentile":306},"2025-12-27",0.09312,{"date":308,"score":239,"percentile":309},"2025-12-28",0.09349,{"date":311,"score":239,"percentile":312},"2025-12-29",0.09313,{"date":314,"score":239,"percentile":261},"2025-12-30",{"date":316,"score":239,"percentile":317},"2025-12-31",0.0935,{"date":319,"score":239,"percentile":320},"2026-01-01",0.09387,{"date":322,"score":239,"percentile":323},"2026-01-02",0.09386,{"date":325,"score":239,"percentile":326},"2026-01-03",0.09374,{"date":328,"score":239,"percentile":329},"2026-01-04",0.09302,{"date":331,"score":239,"percentile":332},"2026-01-05",0.09257,{"date":334,"score":239,"percentile":335},"2026-01-06",0.09232,{"date":337,"score":239,"percentile":338},"2026-01-07",0.09265,{"date":340,"score":239,"percentile":341},"2026-01-08",0.09326,{"date":343,"score":239,"percentile":282},"2026-01-09",{"date":345,"score":239,"percentile":346},"2026-01-10",0.09362,{"date":348,"score":239,"percentile":349},"2026-01-11",0.09315,{"date":351,"score":239,"percentile":352},"2026-01-12",0.09294,{"date":354,"score":239,"percentile":355},"2026-01-13",0.09264,{"date":357,"score":239,"percentile":288},"2026-01-14",{"date":359,"score":239,"percentile":360},"2026-01-15",0.09327,{"date":362,"score":239,"percentile":363},"2026-01-16",0.09368,{"date":365,"score":239,"percentile":366},"2026-01-17",0.09376,{"date":368,"score":239,"percentile":285},"2026-01-18",{"date":370,"score":239,"percentile":371},"2026-01-19",0.09297,{"date":373,"score":239,"percentile":374},"2026-01-20",0.09272,{"date":376,"score":239,"percentile":377},"2026-01-21",0.09239,{"date":379,"score":239,"percentile":380},"2026-01-22",0.09224,{"date":382,"score":239,"percentile":349},"2026-01-23",{"date":384,"score":239,"percentile":385},"2026-01-24",0.09373,{"date":387,"score":239,"percentile":352},"2026-01-25",{"date":389,"score":239,"percentile":390},"2026-01-26",0.09258,{"date":392,"score":239,"percentile":377},"2026-01-27",{"date":394,"score":239,"percentile":395},"2026-01-28",0.09221,{"date":397,"score":239,"percentile":270},"2026-01-29",{"date":399,"score":239,"percentile":400},"2026-01-30",0.09213,{"date":402,"score":239,"percentile":403},"2026-01-31",0.09212,{"date":405,"score":239,"percentile":406},"2026-02-01",0.09236,[408,414,424],{"source":89,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":409,"cvss_v4_0":9},{"baseScore":410,"baseSeverity":411,"vectorString":412,"impactScore":413,"exploitabilityScore":410},2.8,"LOW","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",2.3,{"source":83,"cvss_v2_0":415,"cvss_v3_0":9,"cvss_v3_1":420,"cvss_v4_0":9},{"baseScore":416,"baseSeverity":9,"vectorString":417,"impactScore":418,"exploitabilityScore":419},4.4,"AV:L/AC:M/Au:N/C:P/I:P/A:P",6.4,3.4,{"baseScore":81,"baseSeverity":421,"vectorString":84,"impactScore":422,"exploitabilityScore":423},"MEDIUM",6.2,5.1,{"source":90,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":425,"cvss_v4_0":9},{"baseScore":410,"baseSeverity":9,"vectorString":412,"impactScore":413,"exploitabilityScore":410},[427,437,453,459,464],{"ecosystem":9,"name":428,"vendor":429,"product":428,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":431},"fedora","fedoraproject","o",[432,435],{"version":433,"is_range":77,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"34","cpe",{"version":436,"is_range":77,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"35",{"ecosystem":438,"name":439,"vendor":440,"product":441,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":441,"source":9,"versions":443},"Go","github.com/docker/docker","github.com/docker","docker","golang",[444,450],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":448,"version_end_type":449,"fixed_in":9},"lt20_10_9+incompatible",true,"semver","20.10.9+incompatible","excluding",{"version":451,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":452,"version_end_type":449,"fixed_in":9},"lt20_10_9","20.10.9",{"ecosystem":438,"name":454,"vendor":455,"product":456,"cpe_part":9,"purl_type":442,"purl_namespace":455,"purl_name":456,"source":9,"versions":457},"github.com/moby/moby","github.com/moby","moby",[458],{"version":445,"is_range":446,"range_type":447,"version_start":9,"version_start_type":9,"version_end":448,"version_end_type":449,"fixed_in":9},{"ecosystem":9,"name":456,"vendor":456,"product":456,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":461},"a",[462],{"version":463,"is_range":446,"range_type":89,"version_start":9,"version_start_type":9,"version_end":452,"version_end_type":449,"fixed_in":9},"\u003C 20.10.9",{"ecosystem":9,"name":456,"vendor":465,"product":456,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":466},"mobyproject",[467],{"version":468,"is_range":446,"range_type":434,"version_start":9,"version_start_type":9,"version_end":452,"version_end_type":449,"fixed_in":9},"lt20.10.9"]