pkg:Go/github.com/moby/buildkit

All known vulnerabilities

• CRITICAL10.0CVE-2024-23652BuildKit vulnerable to possible host system access from mount stub cleaner
  from 0, < 0.12.5
• CRITICAL10.0CVE-2024-23652BuildKit vulnerable to possible host system access from mount stub cleaner
  from 0, < 0.12.5
• CRITICAL9.8CVE-2024-23653Privilege escalation in github.com/moby/buildkit
  from 0, < 0.12.5
• CRITICAL9.8CVE-2024-23653Privilege escalation in github.com/moby/buildkit
  from 0, < 0.12.5
• HIGH8.7CVE-2024-23651BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts
  from 0, < 0.12.5
• HIGH8.7CVE-2024-23651BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts
  from 0, < 0.12.5
• HIGH8.4CVE-2026-33747BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH8.4CVE-2026-33747BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH7.5CVE-2026-33748BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH7.5CVE-2026-33748BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit
  from 0, < 0.28.1
• MEDIUM6.5CVE-2023-26054Buildkit credentials inlined to Git URLs could end up in provenance attestation
  >= 0.10.0, < 0.11.4
• MEDIUM5.3CVE-2024-23650Panic in github.com/moby/buildkit
  from 0, < 0.12.5
• MEDIUM5.3CVE-2024-23650Panic in github.com/moby/buildkit
  from 0, < 0.12.5