CVE-2024-36623: Mobyproject Moby

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.

Affected products

• Mobyproject Moby: up to and including 25.0.3

Published 2024-11-29. Last modified 2026-06-17.