Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

Tar extraction in moby/go-archive can write outside the destination directory via link following

Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes read-only runtime mount writable through its shared-export alias

Docker Sandboxes ICMP egress restriction bypass after daemon restart

Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution