Skip to content
OpenAdvisories

Package · Alpine

buildkit

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.2
    CVE-2026-33748

    BuildKit Git URL subdir component can cause access to restricted files

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git…

    moby BuildKit zot kubescape Debian Ubuntu Alpine Wolfi Go
  • High 8.4
    CVE-2026-33747

    BuildKit vulnerable to malicious frontend causing file escape outside of storage root

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outsid…

    moby BuildKit zot kubescape Debian Ubuntu Alpine Wolfi Go
  • Critical 9.8
    CVE-2024-23653 Public exploit

    BuildKit interactive containers API does not validate entitlements check

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It w…

    moby BuildKit zot kubescape Ubuntu Azure Linux Alpine Wolfi Go
  • Critical 10.0
    CVE-2024-23652 Public exploit

    BuildKit possible host system access from mount stub cleaner

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints i…

    moby BuildKit zot kubescape Ubuntu Azure Linux Alpine Wolfi Go
  • High 8.7
    CVE-2024-23651

    BuildKit possible race condition with accessing subpaths from cache mounts

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to file…

    moby BuildKit zot kubescape Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.3
    CVE-2024-23650

    BuildKit possible panic when incorrect parameters sent from frontend

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been f…

    moby BuildKit zot kubescape Ubuntu Azure Linux Alpine Wolfi Go