https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:26:10.800802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01031 bdu:2024-01031 2026-10-03T16:26:11.060705+00:00 bdu:2024-01031 https://cve.radiocsirt.org/vuln/bell-cve-2024-23651 BELL-CVE-2024-23651 2026-10-03T16:26:11.060789+00:00

Affected: Alpaquita:23: podman, Alpaquita:stream: docker, Alpaquita:stream: podman

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0841 certfr-2024-avi-0841 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T16:26:11.060821+00:00 certfr-2024-avi-0841 https://cve.radiocsirt.org/vuln/cleanstart-2025-mu54155 CLEANSTART-2025-MU54155 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner 2026-10-03T16:26:11.060838+00:00

Affected: CleanStart: buildkit, CleanStart: buildkitd

CVE-2024-23651 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-241769 EUVD-2026-241769 2026-10-03T16:26:11.060863+00:00 EUVD-2026-241769 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23651 fkie_cve-2024-23651 2026-10-03T16:26:11.060875+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.

 https://cve.radiocsirt.org/vuln/ghsa-m3r6-h7wv-7xxv GHSA-m3r6-h7wv-7xxv — BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts 2026-10-03T16:26:11.060898+00:00

Affected: Go: github.com/moby/buildkit

### Impact Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container.

### Patches The issue has been fixed in v0.12.5

### Workarounds Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with `--mount=type=cache,source=...` options.

### References https://www.openwall.com/lists/oss-security/2019/05/28/1

 https://cve.radiocsirt.org/vuln/gsd-2024-23651 gsd-2024-23651 2026-10-03T16:26:11.060925+00:00 gsd-2024-23651 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23651 msrc_CVE-2024-23651 — BuildKit possible race condition with accessing subpaths from cache mounts 2026-10-03T16:26:11.060936+00:00 msrc_CVE-2024-23651 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13651-1 openSUSE-SU-2024:13651-1 — buildkit-0.12.5-1.1 on GA media 2026-10-03T16:26:11.060952+00:00

buildkit-0.12.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:0587-1 SUSE-SU-2024:0587-1 — Security update for docker 2026-10-03T16:26:11.060968+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23651 UBUNTU-CVE-2024-23651 2026-10-03T16:26:11.060984+00:00

Affected: Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272 WID-SEC-W-2024-0272 — docker: Mehrere Schwachstellen 2026-10-03T16:26:11.061014+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.