Is Docker Engine 20.10.0 affected?

Vulnerabilities affecting 20.10.0

• 9.9
  CVE-2024-41110 Authz zero length regression
• 8.8
  CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
• 7.6
  CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
• 7.5
  CVE-2023-28840 Encrypted overlay network may be unauthenticated fixed in 20.10.24
• 7.2
  CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
• 7.2
  CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
• 6.9
  CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer fixed in 25.0.19
• 6.8
  CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
• 6.8
  CVE-2023-28842 Encrypted overlay network with a single endpoint is unauthenticated fixed in 20.10.24
• 6.8
  CVE-2023-28841 Encrypted overlay network traffic may be unencrypted fixed in 20.10.24
• 6.1
  CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
• 5.9
  CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration fixed in 23.0.11
• 5.9
  CVE-2021-41091 Insufficiently restricted permissions on data directory fixed in 20.10.9
• 3.3
  CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0
• medium
  GHSA-jq35-85cj-fj4p /sys/devices/virtual/powercap accessible by default to containers
• low
  GHSA-vp35-85q5-9f25 Container build can leak any path on the host into the container (using Git CVE-2022-39253)
• low
  CVE-2022-36109 Security vulnerability relating to supplementary group permissions fixed in 20.10.18
• low
  CVE-2022-24769 Default inheritable capabilities for linux container should be empty fixed in 20.10.14
• medium
  CVE-2021-41190 Ambiguous OCI manifest parsing fixed in 20.10.11
• low
  CVE-2021-41089 `docker cp` allows unexpected chmod of host files fixed in 20.10.9
• medium
  CVE-2021-21285 Docker daemon crash during image pull of malicious image fixed in 20.10.3
• low
  CVE-2021-21284 Access to remapped root allows privilege escalation to real root fixed in 20.10.3

Newer releases