—
GO-2026-4911
Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) in github.com/docker/model-runner
Quick fix
GO-2026-4911 — github.com/docker/model-runner: upgrade to the fixed version with the command below.
go get github.com/docker/model-runner@v1.1.25Details
Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) in github.com/docker/model-runner
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/docker/model-runner
Introduced in:
0Fixed in: 1.1.25Fix
go get github.com/docker/model-runner@v1.1.25