Moby BuildKit

• CVE-2026-121520 Medium 4.5 Malicious client could set xattr value outside of BuildKit state directory 0.1%
• CVE-2026-121522 Medium 6.7 Possible panic from Git source resolver 0.1%
• CVE-2026-93321 Medium 6.9 Malformed LLB file operation can crash buildkitd 0.2%
• CVE-2026-93315 Medium 5.8 BuildKit proxy CA cleanup can be disrupted by build steps <0.1%
• CVE-2026-93326 Medium 6.0 Crafted Git build source can bypass certain policy validation 0.2%
• CVE-2026-93323 Medium 6.8 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory 0.1%
• CVE-2026-93322 Medium 6.9 Malformed MergeOp can crash the BuildKit daemon 0.1%
• CVE-2026-93320 Medium 6.0 BuildKit improperly handles special files in build snapshots 0.1%
• CVE-2026-93319 Medium 5.7 A malicious frontend can cause a daemon panic <0.1%
• CVE-2026-93318 High 7.5 Cache poisoning via unvalidated image layer DiffIDs 0.2%
• CVE-2026-93317 Medium 5.9 Container blob cache can accept unverified content 0.2%
• CVE-2026-93316 High 7.1 Starting daemon with --cdi-disabled flag can lead to panic on specific builds 0.2%
• CVE-2026-75593 High 7.2 BuildKit: Malicious client can bypass destination directory validation on local sources upload 0.5%
• CVE-2026-61711 Medium 5.3 BuildKit: Custom frontend could bypass Seccomp/AppArmor 0.4%
• CVE-2026-61712 Low 2.3 BuildKit: Possible runtime DoS via unbounded group parsing 0.4%
• CVE-2026-15793 Medium 6.5 Git source checkout from a bundle file could lead to command injection 0.2%
• CVE-2026-15792 Medium 6.3 Possible panic when incorrect parameters sent from frontend 0.2%
• CVE-2026-15791 Low 3.3 LLB file operation can be tricked to remove /tmp directory contents 0.2%
• CVE-2026-15789 Medium 6.9 Malicious client can bypass destination directory validation on local sources upload 0.3%
• CVE-2026-15788 Medium 5.6 WCOW cache mount source selector resolves NTFS junctions outside of cache root 0.4%
• CVE-2026-33748 High 8.2 BuildKit Git URL subdir component can cause access to restricted files 0.5%
• CVE-2026-33747 High 8.4 BuildKit vulnerable to malicious frontend causing file escape outside of storage root 0.5%
• CVE-2024-23653 Critical 9.8 BuildKit interactive containers API does not validate entitlements check 3.4%
• CVE-2024-23652 Critical 10.0 BuildKit possible host system access from mount stub cleaner 2.5%
• CVE-2024-23651 High 8.7 BuildKit possible race condition with accessing subpaths from cache mounts 0.9%
• CVE-2024-23650 Medium 5.3 BuildKit possible panic when incorrect parameters sent from frontend 1.1%
• CVE-2023-26054 Medium 6.5 Credentials inlined to Git URLs could end up in provenance attestation in BuildKit 1.0%