Known vulnerabilities in docker-buildkit

Vendor: Fedoraproject
Software: docker-buildkit
Software CPE: cpe:2.3:o:fedoraproject:docker-buildkit:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting docker-buildkit docker-buildkit is affected by 9 known vulnerabilities: 5 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134889 - Resource exhaustion
CVE-2026-47262		 CWE-400 Low
No
No
 0.32.1-1.fc45 19.06.2026 SB2026061902
SB2026070290
SB2026070980
and 11 more
#VU134885 - Incorrect Authorization
CVE-2026-53492		 CWE-863 Low
No
No
 0.32.1-1.fc45 19.06.2026 SB2026061902
SB2026070290
SB20260720365
and 2 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 0.25.2-1.fc41, 0.25.2-1.fc42, 0.25.2-1.fc43, 0.25.2-1.fc44, 0.26.0-1.fc41, 0.26.0-1.fc42, 0.26.0-1.fc43, 0.26.0-1.fc44, 0.26.1-1.fc41, 0.26.1-1.fc42, 0.26.1-1.fc43 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118189 - Improper input validation
CVE-2025-58188		 CWE-20 Medium
No
No
 0.25.2-1.fc41, 0.25.2-1.fc42, 0.25.2-1.fc43, 0.25.2-1.fc44 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 113 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 0.25.2-1.fc41, 0.25.2-1.fc42, 0.25.2-1.fc43, 0.25.2-1.fc44 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 115 more
#VU118184 - Resource exhaustion
CVE-2025-61723		 CWE-400 Medium
No
No
 0.25.2-1.fc41, 0.25.2-1.fc42, 0.25.2-1.fc43, 0.25.2-1.fc44 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 121 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189		 CWE-116 Low
No
No
 0.25.2-1.fc41, 0.25.2-1.fc42, 0.25.2-1.fc43, 0.25.2-1.fc44 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 123 more
#VU116686 - Protection Mechanism Failure
CVE-2025-47910		 CWE-693 Medium
No
No
 0.25.0-1.fc41, 0.25.0-1.fc42, 0.25.0-1.fc43, 0.25.0-1.fc44 07.10.2025 SB2025100755
SB2025100756
SB2025100757
and 88 more
#VU114079 - Improper input validation
CVE-2025-47906		 CWE-20 Low
No
No
 0.25.0-1.fc41, 0.25.0-1.fc42, 0.25.0-1.fc43, 0.25.0-1.fc44 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 130 more