Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2014-8179 — HIGH severity vulnerability | Release Alert

CVE-2014-8179

7.5

HIGHCVSS v3

Published

December 17, 2019

CVSS v2

5 MEDIUM

Affected

12 projects

Assigned by

Red Hat

Severity scale

010

Description

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.

GitHubThe Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

NVD

Docker HubDocker in Docker! (commonly known as "dind")

< 1.8.3NVD

home-assistant/docker

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Home Assistant containers

< 1.8.3NVD

Visual Studio MarketplaceMakes it easy to create, manage, and debug containerized applications.

< 1.8.3NVD

NPMStatic documentation generator based on docco

< 1.8.3NVD

RubyGemsProvides an OOP interface to docker's command-line interface without relying on its HTTP API.

< 1.8.3NVD

GitHubWrapper for Docker CLI.

< 1.8.3NVD

Crates.ioDocker Remote API in Rust

< 1.8.3NVD

Python Package IndexA Python library for the Docker Engine API.

< 1.8.3NVD

GitHubDocumentation generator

< 1.8.3NVD

tomsquest/docker

GitHubOfficial docker-composer for wallabag.

< 1.8.3NVD

WeblateOrg/docker

GitHubOfficial Docker container for Weblate, a libre software web-based continuous localization system

< 1.8.3NVD