| CVE-2026-121520 |
Malicious client could set xattr value outside of BuildKit state directory
|
4.5
Medium
|
Nov 3, 2026 |
| CVE-2026-121522 |
Possible panic from Git source resolver
|
6.7
Medium
|
Nov 3, 2026 |
| CVE-2026-93321 |
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all…
|
6.9
Medium
|
Oct 5, 2026 |
| CVE-2026-93315 |
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup
|
5.8
Medium
|
Oct 5, 2026 |
| CVE-2026-93326 |
A build step for a Git source, crafted in a specific way, can bypass some policy validation rules
|
6.0
Medium
|
Oct 5, 2026 |
| CVE-2026-93323 |
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size…
|
6.8
Medium
|
Oct 5, 2026 |
| CVE-2026-93322 |
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all…
|
6.9
Medium
|
Oct 5, 2026 |
| CVE-2026-93320 |
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected
|
6.0
Medium
|
Oct 5, 2026 |
| CVE-2026-93319 |
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data…
|
5.7
Medium
|
Oct 5, 2026 |
| CVE-2026-93318 |
A malicious image can advertise DiffIDs from another image while containing different layer contents
|
7.5
High
|
Oct 5, 2026 |
| CVE-2026-93317 |
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not…
|
5.9
Medium
|
Oct 5, 2026 |
| CVE-2026-93316 |
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices
|
7.1
High
|
Oct 5, 2026 |
| CVE-2026-75593 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
7.2
High
|
Aug 19, 2026 |
| CVE-2026-61711 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
5.3
Medium
|
Aug 19, 2026 |
| CVE-2026-61712 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
2.3
Low
|
Aug 19, 2026 |
| CVE-2026-15792 |
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic
|
6.3
Medium
|
Jul 21, 2026 |
| CVE-2026-15793 |
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-15791 |
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory
|
3.3
Low
|
Jul 21, 2026 |
| CVE-2026-15789 |
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the…
|
6.9
Medium
|
Jul 21, 2026 |
| CVE-2026-15788 |
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory…
|
5.6
Medium
|
Jul 20, 2026 |
| CVE-2026-33748 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.2
High
|
Mar 27, 2026 |
| CVE-2026-33747 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.4
High
|
Mar 27, 2026 |
| CVE-2024-23653 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
9.8
Critical
|
Jan 31, 2024 |
| CVE-2024-23652 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
10.0
Critical
|
Jan 31, 2024 |
| CVE-2024-23651 |
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
|
8.7
High
|
Jan 31, 2024 |