buildx vulnerabilities

CVEs whose affected-version data names the buildx package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103433Medium· 6.9

yesterday

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or cons…

▾ SunlitDocker · Docker Buildxvia NVD