https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:54:38.632594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01029 bdu:2024-01029 2026-10-02T14:54:38.656004+00:00 bdu:2024-01029 https://cve.radiocsirt.org/vuln/bell-cve-2024-23652 BELL-CVE-2024-23652 2026-10-02T14:54:38.656047+00:00

Affected: Alpaquita:23: podman, Alpaquita:stream: docker, Alpaquita:stream: podman

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0841 certfr-2024-avi-0841 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T14:54:38.656077+00:00 certfr-2024-avi-0841 https://cve.radiocsirt.org/vuln/cleanstart-2025-vo24808 CLEANSTART-2025-VO24808 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner 2026-10-02T14:54:38.656094+00:00

Affected: CleanStart: buildkit, CleanStart: buildkitd

CVE-2024-23652 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-244986 EUVD-2026-244986 2026-10-02T14:54:38.656117+00:00 EUVD-2026-244986 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23652 fkie_cve-2024-23652 2026-10-02T14:54:38.656129+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

 https://cve.radiocsirt.org/vuln/ghsa-4v98-7qmw-rqr8 GHSA-4v98-7qmw-rqr8 — BuildKit vulnerable to possible host system access from mount stub cleaner 2026-10-02T14:54:38.656151+00:00

Affected: Go: github.com/moby/buildkit

### Impact A malicious BuildKit frontend or Dockerfile using `RUN --mount` could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.

### Patches The issue has been fixed in v0.12.5

### Workarounds Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing `RUN --mount` feature.

### References

 https://cve.radiocsirt.org/vuln/gsd-2024-23652 gsd-2024-23652 2026-10-02T14:54:38.656173+00:00 gsd-2024-23652 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23652 msrc_CVE-2024-23652 — BuildKit possible host system access from mount stub cleaner 2026-10-02T14:54:38.656184+00:00 msrc_CVE-2024-23652 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13651-1 openSUSE-SU-2024:13651-1 — buildkit-0.12.5-1.1 on GA media 2026-10-02T14:54:38.656199+00:00

buildkit-0.12.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:0587-1 SUSE-SU-2024:0587-1 — Security update for docker 2026-10-02T14:54:38.656214+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23652 UBUNTU-CVE-2024-23652 2026-10-02T14:54:38.656228+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272 WID-SEC-W-2024-0272 — docker: Mehrere Schwachstellen 2026-10-02T14:54:38.656256+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.