github.com/moby/buildkit vulnerabilities
CVEs whose affected-version data names the github.com/moby/buildkit package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-61711MediumBuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit: Custom frontend could bypass Seccomp/AppArmor
▾ Sunlitmoby · github.com/moby/buildkitEPSS 0.36%via OSV
CVE-2026-61712LowBuildKit has a possible runtime DoS via unbounded group parsing
BuildKit has a possible runtime DoS via unbounded group parsing
▾ Sunlitmoby · github.com/moby/buildkitEPSS 0.40%via OSV
CVE-2026-33748High· 7.5BuildKit Git URL subdir component can cause access to restricted files
BuildKit Git URL subdir component can cause access to restricted files
▾ Twilightmoby · github.com/moby/buildkitEPSS 0.46%via OSV
CVE-2024-23652Critical· 10.0PoCBuildKit vulnerable to possible host system access from mount stub cleaner
BuildKit vulnerable to possible host system access from mount stub cleaner
▾ Abyssalmoby · github.com/moby/buildkitEPSS 2.1%via OSV