Known vulnerabilities in BuildKit

Software: BuildKit
Software CPE: cpe:2.3:a:moby:buildkit:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BuildKit BuildKit is affected by 8 known vulnerabilities: 2 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128396 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33747
CWE-22 Low
No
No
0.28.1 28.04.2026 SB20260428214
SB20260428221
SB20260428222
and 9 more
#VU128395 - Improper input validation
CVE-2026-33748
CWE-20 Medium
No
No
0.28.1 28.04.2026 SB20260428214
SB20260428220
SB2026050767
and 8 more
#VU86039 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23650
CWE-754 Medium
No
No
0.12.5 02.02.2024 SB2024020229
SB2024022911
SB20240611189
and 11 more
#VU86038 - Incorrect Authorization
CVE-2024-23653
CWE-863 High
Available
No
0.12.5 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652
CWE-22 Medium
No
No
0.12.5 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU86035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23651
CWE-362 Medium
No
No
0.12.5 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU85991 - Security Features
CVE-2024-21626
CWE-254 High
Available
No
0.12.5 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU74150 - Insufficiently Protected Credentials
CVE-2023-26054
CWE-522 Medium
No
No
0.11.4 28.03.2023 SB2023032877
SB2023032878
SB2023061543
and 6 more