Advisories · Technology
Docker Sandboxes.
Every CVE that names Docker Sandboxes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Docker Sandboxes host Git executes repository-controlled programs
- Docker Sandboxes
- CWE-15
- CVSS 8.4 High
Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory
- Docker Sandboxes
- Path traversal
- CVSS 5.9 Medium
Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
- Docker Sandboxes
- Information disclosure
- CVSS 5.9 Medium
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
- Docker Sandboxes
- CWE-636
- CVSS 6.7 Medium
Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
- Docker Sandboxes
- CWE-178
- CVSS 8.7 High
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
- Docker Sandboxes
- Race condition
- CVSS 9.4 CriticalCritical · CVSS 9+
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
- Docker Sandboxes
- Path traversal
- CVSS 5.7 Medium
Docker Sandboxes read-only runtime mount writable through its shared-export alias
- Docker Sandboxes
- Broken access control
- CVSS 5.1 Medium
Docker Sandboxes ICMP egress restriction bypass after daemon restart
- Docker Sandboxes
- CWE-665
- CWE-923
- CVSS 5.7 Medium
Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
- Docker Sandboxes
- CWE-923