-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/moby/moby | go | < 25.0.4 | 25.0.4 |
Miggo AIRoot Cause AnalysisThe vulnerability description points to a race condition in the streamformatter package. The provided commit patches (5689dabfb357b673abdb4391eef426f297d7d1bb and 8e3bcf19748838b30e34d612832d1dc9d90363b8) clearly show the addition of a mutex (sync.Mutex) to the progressOutput struct and its usage within the WriteProgress method to synchronize access to the out.out.Write call. This directly addresses a race condition where concurrent writes could occur. Therefore, the WriteProgress method is identified as the vulnerable function prior to this fix.