https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:38:01.298951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07149 bdu:2026-07149 2026-10-02T13:38:01.553180+00:00 bdu:2026-07149 https://cve.radiocsirt.org/vuln/bell-cve-2026-33747 BELL-CVE-2026-33747 2026-10-02T13:38:01.553256+00:00

Affected: Alpaquita:stream: docker

 https://cve.radiocsirt.org/vuln/cleanstart-2026-du09908 CLEANSTART-2026-DU09908 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner 2026-10-02T13:38:01.553309+00:00

Affected: CleanStart: docker-cli-buildx

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.

 https://cve.radiocsirt.org/vuln/euvd-2026-277883 EUVD-2026-277883 2026-10-02T13:38:01.553349+00:00 EUVD-2026-277883 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33747 fkie_cve-2026-33747 2026-10-02T13:38:01.553362+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context. The issue has been fixed in v0.28.1. The vulnerability requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-4c29-8rgm-jvjj GHSA-4c29-8rgm-jvjj — BuildKit's Malicious frontend can cause file escape outside of storage root 2026-10-02T13:38:01.553387+00:00

Affected: Go: github.com/moby/buildkit

### Impact When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.

### Patches The issue has been fixed in v0.28.1+

### Workarounds Issue requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10456-1 openSUSE-SU-2026:10456-1 — tailscale-1.96.4-1.1 on GA media 2026-10-02T13:38:01.553411+00:00

tailscale-1.96.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:10125 RHSA-2026:10125 — Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release 2026-10-02T13:38:01.553429+00:00

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

 https://cve.radiocsirt.org/vuln/suse-su-2026:21851-1 SUSE-SU-2026:21851-1 — Security update for docker-stable 2026-10-02T13:38:01.553457+00:00

Security update for docker-stable

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33747 UBUNTU-CVE-2026-33747 2026-10-02T13:38:01.553474+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:25.10: docker.io, Ubuntu:25.10: docker.io-app and 2 more

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context. The issue has been fixed in v0.28.1. The vulnerability requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0873 WID-SEC-W-2026-0873 — docker: Mehrere Schwachstellen 2026-10-02T13:38:01.553514+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in docker ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.