Known vulnerabilities in BuildKit 0.33.0

Software: BuildKit
Version: 0.33.0
Software CPE: cpe:2.3:a:moby:buildkit:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BuildKit version 0.33.0 BuildKit 0.33.0 is affected by 10 vulnerabilities: 2 high, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153197 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-93326
CWE-180 Medium
No
No
0.33.1 02.10.2026 SB2026100259
#VU153196 - Uncontrolled Memory Allocation
CVE-2026-93323
CWE-789 Low
No
No
0.33.1 02.10.2026 SB2026100259
#VU153195 - Improper Validation of Array Index
CVE-2026-93322
CWE-129 Low
No
No
0.33.1 02.10.2026 SB2026100259
#VU153194 - Improper Validation of Array Index
CVE-2026-93321
CWE-129 Low
No
No
0.33.1 02.10.2026 SB2026100259
#VU153193 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-93320
CWE-441 High
No
No
0.33.1 02.10.2026 SB2026100259
#VU153192 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2026-93319
CWE-567 Low
No
No
0.33.1 02.10.2026 SB2026100259
#VU153190 - Improper Validation of Integrity Check Value
CVE-2026-93318
CWE-354 High
No
No
0.33.1 02.10.2026 SB2026100259
#VU153189 - Improper Validation of Integrity Check Value
CVE-2026-93317
CWE-354 Medium
No
No
0.33.1 02.10.2026 SB2026100259
#VU153172 - Improper input validation
CVE-2026-93316
CWE-20 Medium
No
No
0.33.1 02.10.2026 SB2026100259
#VU153169 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-93315
CWE-367 Low
No
No
0.33.1 02.10.2026 SB2026100259