| Package | Affected versions | Patched versions |
|---|---|---|
| buildkit | < 0.31.2 | 0.31.2 |
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free