| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/moby/buildkit | < 0.12.5 | 0.12.5 |
| buildkit | < 0.12.5 | 0.12.5 |
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
The issue has been fixed in v0.12.5
Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax line on your Dockerfile, or with --frontend flag when using buildctl build command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free