Docker lists vulnerable Engine, Moby and SwarmKit releases in new advisory
Older releases of the Docker container platform and two related components are affected by vulnerabilities. Teams running Engine builds older than 23.0.0 should check which version they use.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Docker is affected by vulnerabilities in several of its products, according to an advisory dated November 12, 2026 that reflects the position as of November 10, 2026. The portion of the advisory available here does not describe the flaws. [1]
Three components are named. Docker Engine releases older than 23.0.0 are affected, as are Moby releases before its 2.0.0 beta line, and SwarmKit builds older than version 2.1.3 plus an older build identified by a commit-style version string. [1]
The advisory encourages users and administrators to review the vendor links it provides and apply any necessary updates. No exploitation is mentioned in the available text. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
Docker security advisory (AV26-1153)