BU
Product
buildkit
20
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 1High 9Medium 9Low 1
Watch
Add buildkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93321 | 6.9 | Oct 5 | Malformed LLB file operation can crash buildkitd Affected: through 0.33.0 |
| CVE-2026-93322 | 6.9 | Oct 5 | Malformed MergeOp can crash the BuildKit daemon Affected: through 0.33.0 |
| CVE-2026-93323 | 6.8 | Oct 5 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory Affected: through 0.33.0 |
| CVE-2026-93326 | 6.0 | Oct 5 | Crafted Git build source can bypass certain policy validation Affected: through 0.33.0 |
| CVE-2026-93320 | 6.0 | Oct 5 | BuildKit improperly handles special files in build snapshots Affected: through 0.33.0 |
| CVE-2026-93317 | 5.9 | Oct 5 | Container blob cache can accept unverified content Affected: 0.28.0 before 0.33.1 |
| CVE-2026-93315 | 5.8 | Oct 5 | BuildKit proxy CA cleanup can be disrupted by build steps Affected: 0.31.0 before 0.33.1 |
| CVE-2026-93319 | 5.7 | Oct 5 | A malicious frontend can cause a daemon panic Affected: through 0.33.0 |
| CVE-2026-61711 | 5.3 | Aug 19 | BuildKit: Custom frontend could bypass Seccomp/AppArmor Affected: < 0.31.1 |
Showing 9