Product by Open Source
Buildkit
12 known vulnerabilities in Buildkit (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-93318 | Cache poisoning via unvalidated image layer DiffIDs | — | |
| High | CVE-2026-93316 | Starting daemon with --cdi-disabled flag can lead to panic on specific builds | — | |
| Medium | CVE-2026-93321 | Malformed LLB file operation can crash buildkitd | — | |
| Medium | CVE-2026-93322 | Malformed MergeOp can crash the BuildKit daemon | — | |
| Medium | CVE-2026-93323 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | — | |
| Medium | CVE-2026-93326 | Crafted Git build source can bypass certain policy validation | — | |
| Medium | CVE-2026-93320 | BuildKit improperly handles special files in build snapshots | — | |
| Medium | CVE-2026-93317 | Container blob cache can accept unverified content | — | |
| Medium | CVE-2026-93315 | BuildKit proxy CA cleanup can be disrupted by build steps | — | |
| Medium | CVE-2026-93319 | A malicious frontend can cause a daemon panic | — | |
| Medium | CVE-2026-61711 | BuildKit: Custom frontend could bypass Seccomp/AppArmor | — | |
| Low | CVE-2026-61712 | BuildKit: Possible runtime DoS via unbounded group parsing | — |