BU
Product
Buildkit
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 2Low 0
Watch
Add Buildkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33747 | 9.8 | Mar 27 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root Affected: before 0.28.1 |
| CVE-2024-23653 | 9.8 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner Affected: before 0.12.5 |
| CVE-2024-23652 | 9.1 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner Affected: before 0.12.5 |
| CVE-2026-15793 | 7.5 | Jul 21 | Git source checkout from a bundle file could lead to command injection Affected: 0.30.0 before 0.31.2 |
| CVE-2026-15792 | 7.5 | Jul 21 | Possible panic when incorrect parameters sent from frontend Affected: before 0.31.2 |
| CVE-2026-15791 | 7.5 | Jul 21 | LLB file operation can be tricked to remove /tmp directory contents Affected: before 0.31.2 |
| CVE-2026-15789 | 7.5 | Jul 21 | Malicious client can bypass destination directory validation on local sources upload Affected: before 0.31.2 |
| CVE-2026-15788 | 7.5 | Jul 20 | WCOW cache mount source selector resolves NTFS junctions outside of cache root Affected: before 0.31.2 |
| CVE-2026-33748 | 7.5 | Mar 27 | BuildKit Git URL subdir component can cause access to restricted files Affected: before 0.28.1 |
| CVE-2024-23651 | 7.4 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner Affected: before 0.12.5 |
| CVE-2023-26054 | 6.5 | Mar 6 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner Affected: 0.10.0 before 0.11.4 |
| CVE-2024-23650 | 5.3 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner Affected: before 0.12.5 |
Showing 12