| CVE-2026-121520 |
Malicious client could set xattr value outside of BuildKit state directory
|
4.5
Moyenne
|
3 nov. 2026 |
| CVE-2026-121522 |
Possible panic from Git source resolver
|
6.7
Moyenne
|
3 nov. 2026 |
| CVE-2026-93321 |
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all…
|
6.9
Moyenne
|
5 oct. 2026 |
| CVE-2026-93315 |
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup
|
5.8
Moyenne
|
5 oct. 2026 |
| CVE-2026-93326 |
A build step for a Git source, crafted in a specific way, can bypass some policy validation rules
|
6.0
Moyenne
|
5 oct. 2026 |
| CVE-2026-93323 |
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size…
|
6.8
Moyenne
|
5 oct. 2026 |
| CVE-2026-93322 |
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all…
|
6.9
Moyenne
|
5 oct. 2026 |
| CVE-2026-93320 |
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected
|
6.0
Moyenne
|
5 oct. 2026 |
| CVE-2026-93319 |
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data…
|
5.7
Moyenne
|
5 oct. 2026 |
| CVE-2026-93318 |
A malicious image can advertise DiffIDs from another image while containing different layer contents
|
7.5
Élevée
|
5 oct. 2026 |
| CVE-2026-93317 |
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not…
|
5.9
Moyenne
|
5 oct. 2026 |
| CVE-2026-93316 |
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices
|
7.1
Élevée
|
5 oct. 2026 |
| CVE-2026-75593 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
7.2
Élevée
|
19 août 2026 |
| CVE-2026-61711 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
5.3
Moyenne
|
19 août 2026 |
| CVE-2026-61712 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
2.3
Faible
|
19 août 2026 |
| CVE-2026-15792 |
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic
|
6.3
Moyenne
|
21 juil. 2026 |
| CVE-2026-15793 |
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git…
|
6.5
Moyenne
|
21 juil. 2026 |
| CVE-2026-15791 |
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory
|
3.3
Faible
|
21 juil. 2026 |
| CVE-2026-15789 |
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the…
|
6.9
Moyenne
|
21 juil. 2026 |
| CVE-2026-15788 |
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory…
|
5.6
Moyenne
|
20 juil. 2026 |
| CVE-2026-33748 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.2
Élevée
|
27 mars 2026 |
| CVE-2026-33747 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.4
Élevée
|
27 mars 2026 |
| CVE-2024-23653 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
9.8
Critique
|
31 janv. 2024 |
| CVE-2024-23652 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
10.0
Critique
|
31 janv. 2024 |
| CVE-2024-23651 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.7
Élevée
|
31 janv. 2024 |