https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:44:11.999939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2024-23650 BELL-CVE-2024-23650 2026-10-04T01:44:12.236044+00:00

Affected: Alpaquita:stream: docker

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0646 certfr-2024-avi-0646 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T01:44:12.236106+00:00 certfr-2024-avi-0646 https://cve.radiocsirt.org/vuln/cleanstart-2025-zx96754 CLEANSTART-2025-ZX96754 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner 2026-10-04T01:44:12.236126+00:00

Affected: CleanStart: buildkit, CleanStart: buildkitd

CVE-2024-23650 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2024-09642 cnvd-2024-09642 2026-10-04T01:44:12.236154+00:00 cnvd-2024-09642 https://cve.radiocsirt.org/vuln/euvd-2026-200882 EUVD-2026-200882 2026-10-04T01:44:12.236167+00:00 EUVD-2026-200882 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23650 fkie_cve-2024-23650 2026-10-04T01:44:12.236178+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

 https://cve.radiocsirt.org/vuln/ghsa-9p26-698r-w4hx GHSA-9p26-698r-w4hx — BuildKit vulnerable to possible panic when incorrect parameters sent from frontend 2026-10-04T01:44:12.236200+00:00

Affected: Go: github.com/moby/buildkit

### Impact A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

### Patches The issue has been fixed in v0.12.5

### Workarounds Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command.

### References

 https://cve.radiocsirt.org/vuln/gsd-2024-23650 gsd-2024-23650 2026-10-04T01:44:12.236224+00:00 gsd-2024-23650 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23650 msrc_CVE-2024-23650 — BuildKit possible panic when incorrect parameters sent from frontend 2026-10-04T01:44:12.236235+00:00 msrc_CVE-2024-23650 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14059-1 openSUSE-SU-2024:14059-1 — singularity-ce-4.1.3-1.1 on GA media 2026-10-04T01:44:12.236250+00:00

singularity-ce-4.1.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0226-1 SUSE-SU-2025:0226-1 — Security update for docker-stable 2026-10-04T01:44:12.236269+00:00

Security update for docker-stable

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23650 UBUNTU-CVE-2024-23650 2026-10-04T01:44:12.236284+00:00

Affected: Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:24.04:LTS: docker.io-app

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272 WID-SEC-W-2024-0272 — docker: Mehrere Schwachstellen 2026-10-04T01:44:12.236305+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.