Priority LOW 30
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources.
Vulnerabilities
38 records
Priority LOW 28
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
Priority LOW 16
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.
TI-2026-13283 CVE-2026-15789
Malicious client can bypass destination directory validation on local sources upload
Priority LOW 30
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.
TI-2026-13282 CVE-2026-15788
WCOW cache mount source selector resolves NTFS junctions outside of cache root
Priority LOW 25
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root.
TI-2026-30614 CVE-2026-42306 · GHSA-rg2x-37c3-w2rh
Moby: Race condition in docker cp allows bind mount redirection to host path
Priority LOW 30
Moby is an open source container framework.
TI-2026-30123 CVE-2026-41568 · GHSA-vp62-88p7-qqf5
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
Priority LOW 26
Moby is an open source container framework.
TI-2026-26127 CVE-2026-33748 · GHSA-4vrq-3vrq-g6gg
BuildKit Git URL subdir component can cause access to restricted files
Priority LOW 36
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-26126 CVE-2026-33747 · GHSA-4c29-8rgm-jvjj
BuildKit vulnerable to malicious frontend causing file escape outside of storage root
Priority MEDIUM 43
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2025-34216 CVE-2025-54410 · GHSA-4vq8-7jfc-9cvp
Moby's Firewalld reload removes bridge network isolation
Priority LOW 23
Moby is an open source container framework developed by Docker Inc.
TI-2025-34196 CVE-2025-54388 · GHSA-x4rx-4gw3-53p4
Moby's Firewalld reload makes published container ports accessible from remote hosts
Priority LOW 29
Moby is an open source container framework developed by Docker Inc.
TI-2024-24355 CVE-2024-36623 · GHSA-gh5c-3h97-2f3q
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package…
Priority LOW 36
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
TI-2024-24353 CVE-2024-36621 · GHSA-2mj3-vfvx-fc43
moby v25.0.5 is affected by a Race Condition in…
Priority LOW 30
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go.
TI-2024-24352 CVE-2024-36620 · GHSA-q59j-vv4j-v33c
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
Priority LOW 30
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
TI-2024-21367 CVE-2024-32473 · GHSA-x84c-p2g9-rqv9
Moby IPv6 enabled on IPv4-only network interfaces
Priority LOW 29
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.
TI-2024-19200 CVE-2024-29018 · GHSA-mq39-4gv4-mvpx
External DNS requests from 'internal' networks could lead to data exfiltration
Priority LOW 36
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.
TI-2024-16178 CVE-2024-24557 · GHSA-xw73-rw38-6vjc
Moby classic builder cache poisoning
Priority LOW 34
Moby is an open-source project created by Docker to enable software containerization.
TI-2024-15672 CVE-2024-23653 · GHSA-wr6v-9f75-vh2g
BuildKit interactive containers API does not validate entitlements check
Priority MEDIUM 55
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2024-15671 CVE-2024-23652 · GHSA-4v98-7qmw-rqr8
BuildKit possible host system access from mount stub cleaner
Priority MEDIUM 54
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2024-15670 CVE-2024-23651 · GHSA-m3r6-h7wv-7xxv
BuildKit possible race condition with accessing subpaths from cache mounts
Priority MEDIUM 41
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2024-15669 CVE-2024-23650 · GHSA-9p26-698r-w4hx
BuildKit possible panic when incorrect parameters sent from frontend
Priority LOW 32
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2023-13346 CVE-2023-28840 · GHSA-232p-vwff-86mp
moby/moby's dockerd daemon encrypted overlay network may be unauthenticated
Priority MEDIUM 42
Moby is an open source container framework developed by Docker Inc.
TI-2023-13347 CVE-2023-28841 · GHSA-33pg-m6jh-5237
moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted
Priority LOW 31
Moby is an open source container framework developed by Docker Inc.
TI-2023-13348 CVE-2023-28842 · GHSA-6wrf-mxfj-pf5p
moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated
Priority LOW 33
Moby) is an open source container framework developed by Docker Inc.
TI-2023-11287 CVE-2023-26054 · GHSA-gc89-7gcr-jxqc
Credentials inlined to Git URLs could end up in provenance attestation in BuildKit
Priority LOW 31
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.