Vulnerabilities

TI-2025-03457 CVE-2025-3911 · GHSA-wpwc-6ghv-2w64

Exposure in Docker Desktop logs of environment variables configured for running containers

LOW 23

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc.

CVSS 4.0MEDIUM 5.2 Local Low privileges No interaction EPSS 0.00165 Published 2025-04-29 Fixed in 4.41.0 CWE-532

TI-2025-03635 CVE-2025-4095 · GHSA-2h62-wf4g-8rpr

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

LOW 19

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries.

CVSS 4.0MEDIUM 4.3 Local Low privileges No interaction EPSS 0.00151 Published 2025-04-29 Fixed in 4.41.0 CWE-862

Vulnerabilities

Filters

Exposure in Docker Desktop logs of environment variables configured for running containers

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile