Skip to content
OpenAdvisories

Package · Go

github.com/moby/buildkit

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-61712

    BuildKit: Possible runtime DoS via unbounded group parsing

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a u…

    moby BuildKit github.com/moby/buildkit Go