Is Docker Engine 20.10.23 affected?

CVSS 9.9

14 known vulnerabilities affect 20.10.23 (highest CVSS 9.9).

Your branch 20.10 has reached end of life (Dec 10, 2023).

129 newer releases in its track, up to 29.9.3. What changed up to 29.9.3

Vulnerabilities affecting 20.10.23

9.9
CVE-2024-41110 Authz zero length regression
8.8
CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
7.6
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
7.5
CVE-2023-28840 Encrypted overlay network may be unauthenticated fixed in 20.10.24
7.2
CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
7.2
CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
6.9
CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer fixed in 25.0.19
6.8
CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
6.8
CVE-2023-28842 Encrypted overlay network with a single endpoint is unauthenticated fixed in 20.10.24
6.8
CVE-2023-28841 Encrypted overlay network traffic may be unencrypted fixed in 20.10.24
6.1
CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
5.9
CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration fixed in 23.0.11
3.3
CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0
medium
GHSA-jq35-85cj-fj4p /sys/devices/virtual/powercap accessible by default to containers