-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/docker/cli | go | < 20.10.9 | 20.10.9 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from how credential helpers are handled in authentication flow. The commit diff shows critical changes to GetDefaultAuthConfig's error handling - previously returning nil AuthConfig on helper errors (leading to default registry fallback), now returning a struct with serverAddress. The added test TestGetDefaultAuthConfig_HelperError in registry_test.go validates this fix. ConfigureAuth's parameter handling changes (pointer vs value) in login.go and registry.go indicate it was part of the credential flow that failed to properly validate helper executability before falling back to insecure behavior.
GoGoOngoing coverage of React2Shell