https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:40:46.590003+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358636 EUVD-2026-358636 2026-10-02T13:40:46.607783+00:00 EUVD-2026-358636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75593 fkie_cve-2026-75593 2026-10-02T13:40:46.607824+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.

 https://cve.radiocsirt.org/vuln/ghsa-wqjv-cjqw-p7p5 GHSA-wqjv-cjqw-p7p5 2026-10-02T13:40:46.607859+00:00

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-75593 msrc_CVE-2026-75593 — BuildKit: Malicious client can bypass destination directory validation on local sources upload 2026-10-02T13:40:46.607877+00:00 msrc_CVE-2026-75593 https://cve.radiocsirt.org/vuln/rhsa-2026:50953 RHSA-2026:50953 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T13:40:46.607895+00:00

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2111 WID-SEC-W-2026-2111 — docker: Mehrere Schwachstellen 2026-10-02T13:40:46.607915+00:00

Ein Angreifer kann mehrere Schwachstellen in docker ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.