Security
فارسی
All products

github.com/moby/buildkit

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BuildKit has a possible runtime DoS via unbounded group parsingCVE-2026-61712 · GHSA-72X6-4J93-7W86Version ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Low Fix reported
BuildKit: Custom frontend could bypass Seccomp/AppArmorCVE-2026-61711 · GHSA-7236-3392-C5C6Version ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
BuildKit Git URL subdir component can cause access to restricted filesCVE-2026-33748 · GHSA-4VRQ-3VRQ-G6GGVersion ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
BuildKit's Malicious frontend can cause file escape outside of storage rootCVE-2026-33747 · GHSA-4C29-8RGM-JVJJVersion ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
Buildkit's interactive containers API does not validate entitlements checkCVE-2024-23653 · GHSA-WR6V-9F75-VH2GVersion ranges need review. github.com/moby/buildkit Go Critical Fix reported
BuildKit vulnerable to possible panic when incorrect parameters sent from frontendCVE-2024-23650 · GHSA-9P26-698R-W4HXVersion ranges need review. github.com/moby/buildkitOpenShift Developer Tools and Services/odo GoRed Hat Medium Fix reported
BuildKit vulnerable to possible race condition with accessing subpaths from cache mountsCVE-2024-23651 · GHSA-M3R6-H7WV-7XXVVersion ranges need review. github.com/moby/buildkitRed Hat OpenShift Dev Spaces/devspaces/traefik-rhel8 GoRed Hat High Fix reported
BuildKit vulnerable to possible host system access from mount stub cleanerCVE-2024-23652 · GHSA-4V98-7QMW-RQR8Version ranges need review. github.com/moby/buildkit Go Critical Fix reported
Buildkit credentials inlined to Git URLs could end up in provenance attestationCVE-2023-26054 · GHSA-GC89-7GCR-JXQC github.com/moby/buildkit Go Medium Fix reported