VersionDrift
Product

Is Docker Engine 28.3.2 affected?

Jul 9, 2025 · Release notes ↗

CVSS 8.8

6 known vulnerabilities affect 28.3.2 (highest CVSS 8.8).

Your branch 28 has reached end of life (May 13, 2026).

40 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 28.3.2

  • 8.8
    CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
  • 7.6
    CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
  • 7.2
    CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
  • 7.2
    CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
  • 6.8
    CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
  • 6.1
    CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1

Newer releases

29.9.2Oct 20, 202628.3.2 → 29.9.2
29.9.1Oct 14, 202628.3.2 → 29.9.1
29.9.0Oct 8, 202628.3.2 → 29.9.0
29.8.2Sep 30, 202628.3.2 → 29.8.2
29.8.1Sep 15, 202628.3.2 → 29.8.1
29.8.0Sep 3, 202628.3.2 → 29.8.0
29.7.2Aug 6, 202628.3.2 → 29.7.2
29.7.1Jul 31, 202628.3.2 → 29.7.1
29.7.0Jul 30, 202628.3.2 → 29.7.0
29.6.2Jul 16, 202628.3.2 → 29.6.2
29.6.1Jun 26, 202628.3.2 → 29.6.1
29.6.0Jun 18, 202628.3.2 → 29.6.0
29.5.3Jun 3, 202628.3.2 → 29.5.3
29.5.2May 20, 202628.3.2 → 29.5.2
29.5.1May 18, 202628.3.2 → 29.5.1
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status