Is Docker Engine 23.0.1 affected?

CVSS 9.9

15 known vulnerabilities affect 23.0.1 (highest CVSS 9.9).

Your branch 23.0 has reached end of life (May 19, 2025).

122 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 23.0.1

9.9
CVE-2024-41110 Authz zero length regression
8.8
CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
7.6
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
7.5
CVE-2023-28840 Encrypted overlay network may be unauthenticated fixed in 23.0.3
7.2
CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
7.2
CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
6.9
CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer fixed in 25.0.19
6.9
CVE-2024-24557 Classic builder cache poisoning fixed in 23.0.10
6.8
CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
6.8
CVE-2023-28842 Encrypted overlay network with a single endpoint is unauthenticated fixed in 23.0.3
6.8
CVE-2023-28841 Encrypted overlay network traffic may be unencrypted fixed in 23.0.3
6.1
CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
5.9
CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration fixed in 23.0.11
3.3
CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0
medium
GHSA-jq35-85cj-fj4p /sys/devices/virtual/powercap accessible by default to containers