Vulnerability Reportdocker:29.9.2-dind-alpine3.24

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. Because this is a Docker-in-Docker image running as root and exposing the Docker API on port 2376, an attacker who reaches that port could slow, hang, or crash the daemon, disrupting every container it manages, as the CVE-2026-78669 and CVE-2026-78659 denial-of-service flaws allow. The scan found 43 exposed findings, 6 at severity 7.0 or higher, and the highest-impact issues are reachable from the network in normal operation. Restricting network access to the API port is a sensible compensating control, but it reduces exposure rather than fully eliminating these flaws. Note: CVE-2026-17106 only applies if the daemon extracts archives from untrusted sources, and CVE-2026-111497 only matters if a client like curl fetches a crafted brotli response from an untrusted server.