Vulnerabilities

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup.

A malicious image can advertise DiffIDs from another image while containing different layer contents.

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest.

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices.