moby github.com/moby/sys/user vulnerabilities

Latest moby github.com/moby/sys/user CVEs

Newest publication first

1. CVE-2026-61801 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

   Published 2026-10-08

   Medium·CVSS 5.5 EPSS 0.12%

   The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can sup...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.