{"full_name":"moby/moby","owner":"moby","name":"moby","url":"https://github.com/moby/moby","description":"The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems","homepage":"https://mobyproject.org/","topics":[],"language":"Go","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/27259197?v=4","created_at":"2013-01-18T18:10:57Z","pushed_at":"2026-11-09T22:29:29Z","metrics":{"stars":72361,"forks":19324,"watchers":2855,"issues":23712,"prs":29564,"releases":325,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":540},"growth":{"day":{"stars":0,"forks":2,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[72361,72361],"forks":[19322,19324],"watchers":[2855,2855],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":25526,"title":"Unable to retrieve user's IP address in docker swarm mode","comments":366,"created_at":"2016-08-09T08:48:36Z"},{"number":14080,"title":"build time only -v / --volume option","comments":276,"created_at":"2015-06-21T21:41:26Z"},{"number":2259,"title":"Add ability to mount volume as user other than root","comments":254,"created_at":"2013-10-17T05:13:47Z"},{"number":22054,"title":"Docker Network bypasses Firewall, no option to disable","comments":239,"created_at":"2016-04-14T20:52:39Z"},{"number":13490,"title":"Secrets: write-up best practices, do's and don'ts, roadmap","comments":223,"created_at":"2015-05-26T21:01:43Z"},{"number":6396,"title":"Forward ssh key agent into container","comments":191,"created_at":"2014-06-13T02:33:59Z"},{"number":8887,"title":"--insecure-registry should be on \"docker pull\"","comments":183,"created_at":"2014-10-31T16:05:17Z"},{"number":31101,"title":"Add support for `extends` feature in Compose v3 / docker stack deploy","comments":173,"created_at":"2017-02-16T19:34:08Z"}],"discussions":[{"number":54152,"title":"Pre-start verification of no additional mounts when HostConfig.Tmpfs or HostConfig.Mounts is omitted (Engine 29.9.2 / API 1.56)","comments":1,"category":"Q&A","created_at":"2026-11-07T23:34:11Z"},{"number":54147,"title":"v29.10.0-rc.1","comments":0,"category":"Announcements","created_at":"2026-11-06T03:35:51Z"},{"number":54120,"title":"v29.9.3","comments":0,"category":"Announcements","created_at":"2026-11-03T22:37:18Z"},{"number":54036,"title":"Hi","comments":0,"category":"General","created_at":"2026-10-27T15:18:25Z"},{"number":53994,"title":"v29.9.2","comments":0,"category":"Announcements","created_at":"2026-10-20T20:51:18Z"},{"number":53949,"title":"v29.9.1","comments":0,"category":"Announcements","created_at":"2026-10-14T19:28:37Z"},{"number":53898,"title":"v29.9.0","comments":0,"category":"Announcements","created_at":"2026-10-08T21:34:57Z"},{"number":53896,"title":"client/v0.6.2","comments":0,"category":"Announcements","created_at":"2026-10-08T20:06:35Z"}],"latest_release":{"name":"v29.9.3","tag":"docker-v29.9.3","published_at":"2026-11-03T22:37:18Z","body":"## 29.9.3\r\n\r\nFor a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:\r\n\r\n- [docker/cli, 29.9.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.9.3)\r\n- [moby/moby, 29.9.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.9.3)\r\n\r\n### Security\r\n\r\nThis release includes fixes for multiple security vulnerabilities affecting Docker Engine and related components.\r\n\r\n- **CVE-2026-116587** Fix possible excessive CPU usage when parsing crafted RSA keys  \r\n  [GHSA-mgcc-cww5-fp2q](https://github.com/advisories/GHSA-mgcc-cww5-fp2q)\r\n- **CVE-2026-116591** Fix a possible panic when decompressing zstd data  \r\n  [GHSA-fpmh-frq8-7rj8](https://github.com/advisories/GHSA-fpmh-frq8-7rj8)\r\n- **CVE-2026-115538** Fix missing encryption and spoofing protections for Swarm overlay networks after firewalld flushes Docker's iptables rules  \r\n  [GHSA-6jhp-7446-hf7f](https://github.com/moby/moby/security/advisories/GHSA-6jhp-7446-hf7f)\r\n\r\nThe SwarmKit update fixes the following security vulnerability:\r\n\r\n- **CVE-2026-115539** Fix a vulnerability where an attacker with a valid worker-node TLS certificate and private key could obtain a manager-node certificate shortly after a Swarm leader change  \r\n  [GHSA-628g-hv7f-pgjc](https://github.com/moby/swarmkit/security/advisories/GHSA-628g-hv7f-pgjc)\r\n\r\nThe [BuildKit v0.34.2 update](https://github.com/moby/buildkit/releases/tag/v0.34.2) fixes the following security vulnerabilities:\r\n\r\n- [GHSA-2fqp-xg6f-v7gj](https://github.com/moby/buildkit/security/advisories/GHSA-2fqp-xg6f-v7gj): A build that resolved metadata for the same Git source reference twice could crash the daemon through resolver cache poisoning.  \r\n- [GHSA-w26x-xg27-7qjc](https://github.com/moby/buildkit/security/advisories/GHSA-w26x-xg27-7qjc): A malicious client with access to the BuildKit control APIs could set extended attributes on files outside the BuildKit state directory, potentially granting elevated privileges to programs on the host.  \r\n\r\n### Bug fixes and enhancements\r\n\r\n- Fix literal `<<` keys in YAML files being emitted without quotes. [docker/cli#7461](https://github.com/docker/cli/pull/7461)\r\n- Fix the daemon hanging on container, image, and system API requests under load. [moby/moby#54041](https://github.com/moby/moby/pull/54041)\r\n- Update BuildKit to [v0.34.2](https://github.com/moby/buildkit/releases/tag/v0.34.2). [moby/moby#54107](https://github.com/moby/moby/pull/54107)"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}