How many moby buildkit CVEs are in CISA KEV?

None of moby buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of moby buildkit are affected?

224 distinct moby buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in moby buildkit CVEs?

moby buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).

How many critical moby buildkit vulnerabilities are there?

moby buildkit has 3 critical and 3 high-severity CVEs.

What is the average severity of moby buildkit CVEs?

The average CVSS base score across moby buildkit's scored CVEs is 6.7.

moby buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: moby buildkit vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

moby buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

moby buildkit has 16 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting moby buildkit, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of moby buildkit's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High3

Medium8

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of moby buildkit's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No moby buildkit CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every moby buildkit version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.10.014 CVEs
0.11.0-rc114 CVEs
0.11.0-rc214 CVEs
0.11.0-rc314 CVEs
dockerfile/1.4.014 CVEs
dockerfile/1.4.0-labs14 CVEs
dockerfile/1.5.0-rc114 CVEs
dockerfile/1.5.0-rc1-labs14 CVEs
dockerfile/1.5.0-rc214 CVEs
dockerfile/1.5.0-rc2-labs14 CVEs
0.12.013 CVEs

Common weakness types

The CWE weakness categories most often found in moby buildkit CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many moby buildkit CVEs were published each year.

2020

2023

2024

2026

Other moby products

Browse vulnerabilities for other products by moby.

moby34 CVEs github.com/moby/moby18 CVEs github.com/moby/buildkit9 CVEs github.com/moby/moby/v25 CVEs hyperkit5 CVEs Docker Engine2 CVEs github.com/moby/go-archive1 CVEs github.com/moby/spdystream

Frequently asked questions

Common questions about moby buildkit vulnerabilities.

How many CVEs does moby buildkit have?: moby buildkit has 16 published CVE records since 2020.
How many moby buildkit CVEs are in CISA KEV?: None of moby buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for moby buildkit vulnerabilities?: No moby buildkit CVEs currently have a tracked public exploit in this dataset.
Which versions of moby buildkit are affected?: 224 distinct moby buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in moby buildkit CVEs?: moby buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).
How many critical moby buildkit vulnerabilities are there?: moby buildkit has 3 critical and 3 high-severity CVEs.
What is the average severity of moby buildkit CVEs?: The average CVSS base score across moby buildkit's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track moby buildkit vulnerabilities

Monitor new moby buildkit vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

moby buildkit Vulnerabilities