Skip to content
OpenAdvisories

Package · Go

github.com/moby/buildkit

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-33748

    BuildKit Git URL subdir component can cause access to restricted files

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git…

    moby BuildKit docker.io docker.io Debian Ubuntu Alpine Go
  • High 8.4
    CVE-2026-33747

    BuildKit vulnerable to malicious frontend causing file escape outside of storage root

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outsid…

    moby BuildKit docker.io docker.io Debian Ubuntu Alpine Go
  • High 8.7
    CVE-2024-23651

    BuildKit possible race condition with accessing subpaths from cache mounts

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to file…

    moby BuildKit docker.io docker Ubuntu Alpine Go