pkg:Go/github.com/moby/buildkit

All known vulnerabilities

• CRITICAL10.0CVE-2024-23652Host system modification in github.com/moby/buildkit
  from 0, < 0.12.5
• CRITICAL10.0CVE-2024-23652Host system modification in github.com/moby/buildkit
  from 0, < 0.12.5
• CRITICAL9.8CVE-2024-23653Privilege escalation in github.com/moby/buildkit
  from 0, < 0.12.5
• CRITICAL9.8Privilege escalation in github.com/moby/buildkit
  from 0, < 0.12.5
• HIGH8.7Host system file access in github.com/moby/buildkit
  from 0, < 0.12.5
• HIGH8.7Host system file access in github.com/moby/buildkit
  from 0, < 0.12.5
• HIGH8.4BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH8.4BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH7.5BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit
  from 0, < 0.28.1
• HIGH7.5BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit
  from 0, < 0.28.1
• MEDIUM6.5Buildkit credentials inlined to Git URLs could end up in provenance attestation
  >= 0.10.0, < 0.11.4
• MEDIUM5.3Panic in github.com/moby/buildkit
  from 0, < 0.12.5
• MEDIUM5.3Panic in github.com/moby/buildkit
  from 0, < 0.12.5