[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33997":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":28,"downstream":29,"duplicates":44,"related":45,"reserved_at":9,"published_at":53,"modified_at":54,"state":55,"summary":56,"references_raw":65,"kevs":128,"epss":129,"epss_history":132,"metrics":406,"affected":420},"CVE-2026-33997","Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.",null,[11,19],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-193","Off-by-one Error","A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.","weakness","Draft","Base",[],{"_key":20,"id":20,"name":21,"description":22,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":23},"CWE-266","Incorrect Privilege Assignment","A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.",[],[],[26,27],"GHSA-pxq6-2prw-chj9","GO-2026-4883",[],[30,32,34,36,38,40,42],{"_key":31},"SUSE-SU-2026:1205-1",{"_key":33},"DEBIAN-CVE-2026-33997",{"_key":35},"SUSE-SU-2026:2578-1",{"_key":37},"SUSE-SU-2026:2579-1",{"_key":39},"OPENSUSE-SU-2026:11075-1",{"_key":41},"UBUNTU-CVE-2026-33997",{"_key":43},"OPENSUSE-SU-2026:21205-1",[],[46,47,48,49,50,51],{"_key":31},{"_key":35},{"_key":37},{"_key":39},{"_key":43},{"_key":52},"CGA-2MW7-9WJ3-5PXP","2026-03-31T01:36:51.404Z","2026-07-20T12:04:52.287Z","Analyzed",{"cisa_kev":57,"cisa_ransomware":57,"cisa_vendor":9,"epss_severity":58,"epss_score":59,"severity":60,"severity_score":61,"severity_version":62,"severity_source":63,"severity_vector":64,"severity_status":55},false,"low",0.00387,"high",8.1,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",[66,76,81,85,90,96,100,106,111,116,120,124],{"url":67,"sources":68,"tags":71},"https://github.com/moby/moby/security/advisories/GHSA-pxq6-2prw-chj9",[69,70,63],"osv_go","cve.org",[72,73,74,75],"WEB","X Refsource CONFIRM","Advisory","Vendor Advisory",{"url":77,"sources":78,"tags":79},"https://github.com/moby/moby/commit/f4d6f25bf0c3fa12d4968320a45685947756a22a",[69],[72,80],"FIX",{"url":82,"sources":83,"tags":84},"https://docs.docker.com/engine/extend/legacy_plugins",[69],[72],{"url":86,"sources":87,"tags":88},"https://github.com/moby/moby",[69],[89],"PACKAGE",{"url":91,"sources":92,"tags":93},"https://github.com/moby/moby/releases/tag/docker-v29.3.1",[69,70,63],[72,94,95],"X Refsource MISC","Release Notes",{"url":97,"sources":98,"tags":99},"https://nvd.nist.gov/vuln/detail/CVE-2026-33997",[69],[74],{"url":101,"sources":102,"tags":103},"https://access.redhat.com/security/cve/CVE-2026-33997",[70],[104,105],"VDB Entry","X Refsource REDHAT",{"url":107,"sources":108,"tags":109},"https://bugzilla.redhat.com/show_bug.cgi?id=2453277",[70],[110,105],"Issue Tracking",{"url":112,"sources":113,"tags":114},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33997.json",[70],[115],"X Sadp Csaf Vex",{"url":117,"sources":118,"tags":119},"https://access.redhat.com/errata/RHSA-2026:22347",[70],[75,105],{"url":121,"sources":122,"tags":123},"https://access.redhat.com/errata/RHSA-2026:21769",[70],[75,105],{"url":125,"sources":126,"tags":127},"https://access.redhat.com/errata/RHSA-2026:23345",[70],[75,105],[],{"date":130,"score":59,"percentile":131},"2026-07-05",0.30703,[133,137,140,143,146,150,152,156,159,161,164,167,169,172,175,178,181,184,187,189,192,195,199,202,205,208,211,214,217,220,223,226,229,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,342,345,348,351,354,357,360,363,367,370,373,376,379,382,385,388,391,394,397,400,403],{"date":134,"score":135,"percentile":136},"2026-03-31",0.00011,0.01202,{"date":138,"score":135,"percentile":139},"2026-04-01",0.01201,{"date":141,"score":135,"percentile":142},"2026-04-02",0.01211,{"date":144,"score":135,"percentile":145},"2026-04-03",0.01214,{"date":147,"score":148,"percentile":149},"2026-04-04",0.00012,0.01537,{"date":151,"score":148,"percentile":149},"2026-04-05",{"date":153,"score":154,"percentile":155},"2026-04-06",0.00013,0.01968,{"date":157,"score":154,"percentile":158},"2026-04-07",0.01967,{"date":160,"score":154,"percentile":158},"2026-04-08",{"date":162,"score":154,"percentile":163},"2026-04-09",0.01982,{"date":165,"score":154,"percentile":166},"2026-04-10",0.01979,{"date":168,"score":154,"percentile":158},"2026-04-11",{"date":170,"score":154,"percentile":171},"2026-04-12",0.01952,{"date":173,"score":154,"percentile":174},"2026-04-13",0.01947,{"date":176,"score":154,"percentile":177},"2026-04-14",0.01924,{"date":179,"score":154,"percentile":180},"2026-04-15",0.01918,{"date":182,"score":154,"percentile":183},"2026-04-16",0.01926,{"date":185,"score":154,"percentile":186},"2026-04-17",0.01931,{"date":188,"score":154,"percentile":183},"2026-04-18",{"date":190,"score":154,"percentile":191},"2026-04-19",0.0191,{"date":193,"score":154,"percentile":194},"2026-04-20",0.01899,{"date":196,"score":197,"percentile":198},"2026-04-21",0.00015,0.0319,{"date":200,"score":197,"percentile":201},"2026-04-22",0.03205,{"date":203,"score":197,"percentile":204},"2026-04-23",0.0322,{"date":206,"score":197,"percentile":207},"2026-04-24",0.03196,{"date":209,"score":197,"percentile":210},"2026-04-25",0.03207,{"date":212,"score":197,"percentile":213},"2026-04-26",0.03188,{"date":215,"score":197,"percentile":216},"2026-04-27",0.03178,{"date":218,"score":197,"percentile":219},"2026-04-28",0.03217,{"date":221,"score":197,"percentile":222},"2026-04-29",0.03235,{"date":224,"score":197,"percentile":225},"2026-04-30",0.03233,{"date":227,"score":197,"percentile":228},"2026-05-01",0.03231,{"date":230,"score":231,"percentile":232},"2026-05-02",0.00016,0.039,{"date":234,"score":231,"percentile":235},"2026-05-03",0.03889,{"date":237,"score":231,"percentile":238},"2026-05-04",0.03884,{"date":240,"score":231,"percentile":241},"2026-05-05",0.03876,{"date":243,"score":231,"percentile":244},"2026-05-06",0.03868,{"date":246,"score":231,"percentile":247},"2026-05-07",0.03893,{"date":249,"score":231,"percentile":250},"2026-05-08",0.03898,{"date":252,"score":231,"percentile":253},"2026-05-09",0.03926,{"date":255,"score":231,"percentile":256},"2026-05-10",0.03936,{"date":258,"score":231,"percentile":259},"2026-05-11",0.03929,{"date":261,"score":231,"percentile":262},"2026-05-12",0.03933,{"date":264,"score":231,"percentile":265},"2026-05-13",0.03949,{"date":267,"score":231,"percentile":268},"2026-05-14",0.0396,{"date":270,"score":231,"percentile":271},"2026-05-15",0.03972,{"date":273,"score":231,"percentile":274},"2026-05-16",0.03982,{"date":276,"score":231,"percentile":277},"2026-05-17",0.03979,{"date":279,"score":231,"percentile":280},"2026-05-18",0.03957,{"date":282,"score":231,"percentile":283},"2026-05-19",0.0395,{"date":285,"score":231,"percentile":286},"2026-05-20",0.03951,{"date":288,"score":231,"percentile":289},"2026-05-21",0.03955,{"date":291,"score":231,"percentile":292},"2026-05-22",0.04143,{"date":294,"score":231,"percentile":295},"2026-05-23",0.04131,{"date":297,"score":231,"percentile":298},"2026-05-24",0.04125,{"date":300,"score":231,"percentile":301},"2026-05-25",0.041,{"date":303,"score":231,"percentile":304},"2026-05-26",0.04095,{"date":306,"score":231,"percentile":307},"2026-05-27",0.04122,{"date":309,"score":231,"percentile":310},"2026-05-28",0.04107,{"date":312,"score":231,"percentile":313},"2026-05-29",0.04121,{"date":315,"score":231,"percentile":316},"2026-05-30",0.04146,{"date":318,"score":231,"percentile":319},"2026-05-31",0.04124,{"date":321,"score":231,"percentile":322},"2026-06-01",0.04053,{"date":324,"score":231,"percentile":325},"2026-06-02",0.04029,{"date":327,"score":231,"percentile":328},"2026-06-03",0.04012,{"date":330,"score":231,"percentile":331},"2026-06-04",0.04011,{"date":333,"score":231,"percentile":334},"2026-06-05",0.04025,{"date":336,"score":231,"percentile":337},"2026-06-06",0.04024,{"date":339,"score":340,"percentile":341},"2026-06-07",0.00019,0.05313,{"date":343,"score":340,"percentile":344},"2026-06-08",0.05273,{"date":346,"score":340,"percentile":347},"2026-06-09",0.05317,{"date":349,"score":340,"percentile":350},"2026-06-10",0.05344,{"date":352,"score":340,"percentile":353},"2026-06-11",0.05366,{"date":355,"score":340,"percentile":356},"2026-06-12",0.05385,{"date":358,"score":340,"percentile":359},"2026-06-13",0.05379,{"date":361,"score":340,"percentile":362},"2026-06-14",0.05369,{"date":364,"score":365,"percentile":366},"2026-06-15",0.00315,0.23002,{"date":368,"score":365,"percentile":369},"2026-06-16",0.23026,{"date":371,"score":365,"percentile":372},"2026-06-17",0.23042,{"date":374,"score":365,"percentile":375},"2026-06-18",0.23066,{"date":377,"score":365,"percentile":378},"2026-06-19",0.23059,{"date":380,"score":365,"percentile":381},"2026-06-20",0.23048,{"date":383,"score":365,"percentile":384},"2026-06-21",0.23032,{"date":386,"score":365,"percentile":387},"2026-06-22",0.23015,{"date":389,"score":365,"percentile":390},"2026-06-23",0.23089,{"date":392,"score":365,"percentile":393},"2026-06-24",0.23125,{"date":395,"score":365,"percentile":396},"2026-06-25",0.23211,{"date":398,"score":365,"percentile":399},"2026-06-26",0.23246,{"date":401,"score":365,"percentile":402},"2026-06-27",0.23284,{"date":404,"score":365,"percentile":405},"2026-06-28",0.23243,[407,413,416],{"source":69,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":408,"cvss_v4_0":9},{"baseScore":409,"baseSeverity":9,"vectorString":410,"impactScore":411,"exploitabilityScore":412},6.8,"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",8.7,4.1,{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":414,"cvss_v4_0":9},{"baseScore":409,"baseSeverity":415,"vectorString":410,"impactScore":411,"exploitabilityScore":412},"MEDIUM",{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":417,"cvss_v4_0":9},{"baseScore":61,"baseSeverity":418,"vectorString":64,"impactScore":411,"exploitabilityScore":419},"HIGH",7.2,[421,432,441,447,454,458],{"ecosystem":9,"name":422,"vendor":423,"product":422,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"engine","docker","a",[426],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":430,"version_end_type":431,"fixed_in":9},"lt29.3.1",true,"cpe","29.3.1","excluding",{"ecosystem":433,"name":434,"vendor":435,"product":423,"cpe_part":9,"purl_type":436,"purl_namespace":435,"purl_name":423,"source":9,"versions":437},"Go","github.com/docker/docker","github.com/docker","golang",[438],{"version":439,"is_range":428,"range_type":440,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all","semver",{"ecosystem":433,"name":442,"vendor":443,"product":444,"cpe_part":9,"purl_type":436,"purl_namespace":443,"purl_name":444,"source":9,"versions":445},"github.com/moby/moby","github.com/moby","moby",[446],{"version":439,"is_range":428,"range_type":440,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":433,"name":448,"vendor":442,"product":449,"cpe_part":9,"purl_type":436,"purl_namespace":442,"purl_name":449,"source":9,"versions":450},"github.com/moby/moby/v2","v2",[451],{"version":452,"is_range":428,"range_type":440,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":431,"fixed_in":9},"lt2_0_0_beta_8","2.0.0-beta.8",{"ecosystem":9,"name":444,"vendor":444,"product":444,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":455},[456],{"version":457,"is_range":428,"range_type":70,"version_start":9,"version_start_type":9,"version_end":430,"version_end_type":431,"fixed_in":9},"\u003C 29.3.1",{"ecosystem":9,"name":444,"vendor":459,"product":444,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":460},"mobyproject",[461],{"version":427,"is_range":428,"range_type":429,"version_start":9,"version_start_type":9,"version_end":430,"version_end_type":431,"fixed_in":9}]