GO-2026-4911

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) in github.com/docker/model-runner

En bref

Publiée: 2026-04-02 18:42 UTC
Mise à jour: 2026-04-02 21:20 UTC
CVE: CVE-2026-33990
Alias: GHSA-x2f5-332j-9xwq

Description

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) in github.com/docker/model-runner

Paquets affectés

Paquet	Versions
Go · github.com/docker/model-runner	introduced 0, fixed 1.1.25

Références

https://github.com/docker/model-runner/security/advisories/GHSA-x2f5-332j-9xwq ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database