CVE-2026-15788

概要

参考情報

• moby/buildkit security advisory · Vendor Advisory

buildkit のその他の脆弱性

• CVE-2026-15793高 7.5BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git s…
• CVE-2026-15792高 7.5A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
• CVE-2026-15791高 7.5A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally…
• CVE-2026-15789高 7.5A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory…
• CVE-2026-33748高 7.5BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28…