https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:40:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-358636 EUVD-2026-358636 https://cve.radiocsirt.org/vuln/euvd-2026-358636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75593 <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.</p> <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-75593 https://cve.radiocsirt.org/vuln/ghsa-wqjv-cjqw-p7p5 <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.</p> <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.</p> https://cve.radiocsirt.org/vuln/ghsa-wqjv-cjqw-p7p5 https://cve.radiocsirt.org/vuln/msrc_cve-2026-75593 msrc_CVE-2026-75593 https://cve.radiocsirt.org/vuln/msrc_cve-2026-75593 https://cve.radiocsirt.org/vuln/rhsa-2026:50953 <p>github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification</p> <p>github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification</p> https://cve.radiocsirt.org/vuln/rhsa-2026:50953 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2111 <p>Ein Angreifer kann mehrere Schwachstellen in docker ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in docker ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2111