https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:48:36.095191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01030 bdu:2024-01030 2026-10-03T01:48:36.464804+00:00 bdu:2024-01030 https://cve.radiocsirt.org/vuln/bell-cve-2024-23653 BELL-CVE-2024-23653 2026-10-03T01:48:36.464867+00:00

Affected: Alpaquita:23: podman, Alpaquita:stream: docker, Alpaquita:stream: podman

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0841 certfr-2024-avi-0841 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T01:48:36.464902+00:00 certfr-2024-avi-0841 https://cve.radiocsirt.org/vuln/cleanstart-2025-hp29789 CLEANSTART-2025-HP29789 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner 2026-10-03T01:48:36.464920+00:00

Affected: CleanStart: buildkit, CleanStart: buildkitd

CVE-2024-23653 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-159744 EUVD-2026-159744 2026-10-03T01:48:36.464947+00:00 EUVD-2026-159744 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23653 fkie_cve-2024-23653 2026-10-03T01:48:36.464959+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources.

 https://cve.radiocsirt.org/vuln/ghsa-wr6v-9f75-vh2g GHSA-wr6v-9f75-vh2g — Buildkit's interactive containers API does not validate entitlements check 2026-10-03T01:48:36.464984+00:00

Affected: Go: github.com/moby/buildkit

### Impact In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request.

### Patches The issue has been fixed in v0.12.5 .

### Workarounds Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command.

### References

 https://cve.radiocsirt.org/vuln/gsd-2024-23653 gsd-2024-23653 2026-10-03T01:48:36.465011+00:00 gsd-2024-23653 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23653 msrc_CVE-2024-23653 — BuildKit interactive containers API does not validate entitlements check 2026-10-03T01:48:36.465023+00:00 msrc_CVE-2024-23653 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13688-1 openSUSE-SU-2024:13688-1 — buildkit-0.12.5-2.1 on GA media 2026-10-03T01:48:36.465040+00:00

buildkit-0.12.5-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:0587-1 SUSE-SU-2024:0587-1 — Security update for docker 2026-10-03T01:48:36.465056+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23653 UBUNTU-CVE-2024-23653 2026-10-03T01:48:36.465073+00:00

Affected: Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272 WID-SEC-W-2024-0272 — docker: Mehrere Schwachstellen 2026-10-03T01:48:36.465105+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.