Skip to content
OpenAdvisories

Package · Go

github.com/moby/buildkit

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-61711

    BuildKit: Custom frontend could bypass Seccomp/AppArmor

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/spec_linux.go trea…

    moby BuildKit github.com/moby/buildkit Go
  • Medium 5.3
    CVE-2024-23650

    BuildKit possible panic when incorrect parameters sent from frontend

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been f…

    moby BuildKit docker docker.io-app Ubuntu Alpine Go
  • Medium 6.5
    CVE-2023-26054

    Credentials inlined to Git URLs could end up in provenance attestation in BuildKit

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenanc…

    moby BuildKit docker github.com/moby/buildkit Alpine Go