How many moby buildkit CVEs are in CISA KEV?

None of moby buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for moby buildkit vulnerabilities?

Yes — 1 of moby buildkit's CVEs have a known public exploit.

Which versions of moby buildkit are affected?

243 distinct moby buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in moby buildkit CVEs?

moby buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-129 (Improper Validation of Array Index).

How many critical moby buildkit vulnerabilities are there?

moby buildkit has 3 critical and 5 high-severity CVEs.

What is the average severity of moby buildkit CVEs?

The average CVSS base score across moby buildkit's scored CVEs is 6.6.

moby buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: moby buildkit vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

moby buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

moby buildkit has 26 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.6. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of moby buildkit's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High5

Medium16

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of moby buildkit's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of moby buildkit's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every moby buildkit version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.10.022 CVEs
0.11.0-rc122 CVEs
0.11.0-rc222 CVEs
0.11.0-rc322 CVEs
dockerfile/1.4.022 CVEs
dockerfile/1.4.0-labs22 CVEs
dockerfile/1.5.0-rc122 CVEs
dockerfile/1.5.0-rc1-labs22 CVEs
dockerfile/1.5.0-rc222 CVEs
dockerfile/1.5.0-rc2-labs22 CVEs
0.12.021 CVEs

Common weakness types

The CWE weakness categories most often found in moby buildkit CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many moby buildkit CVEs were published each year.

2020

2023

2024

2026

Other moby products

Browse vulnerabilities for other products by moby.

moby36 CVEs github.com/moby/moby18 CVEs github.com/moby/buildkit9 CVEs github.com/moby/moby/v25 CVEs hyperkit5 CVEs Docker Engine2 CVEs github.com/moby/go-archive1 CVEs github.com/moby/spdystream

Frequently asked questions

Common questions about moby buildkit vulnerabilities.

How many CVEs does moby buildkit have?: moby buildkit has 26 published CVE records since 2020.
How many moby buildkit CVEs are in CISA KEV?: None of moby buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for moby buildkit vulnerabilities?: Yes — 1 of moby buildkit's CVEs have a known public exploit.
Which versions of moby buildkit are affected?: 243 distinct moby buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in moby buildkit CVEs?: moby buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-129 (Improper Validation of Array Index).
How many critical moby buildkit vulnerabilities are there?: moby buildkit has 3 critical and 5 high-severity CVEs.
What is the average severity of moby buildkit CVEs?: The average CVSS base score across moby buildkit's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track moby buildkit vulnerabilities

Get an alert for each new moby buildkit CVE, with AI-written analysis and remediation steps.

Create an account See pricing

moby buildkit Vulnerabilities