CVE-2024-36620: Mobyproject Moby

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

Affected products

• Mobyproject Moby: from 25.0.0, up to and including 26.0.2

Published 2024-11-29. Last modified 2026-06-17.