How many moby github.com/moby/buildkit CVEs are in CISA KEV?

None of moby github.com/moby/buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of moby github.com/moby/buildkit are affected?

8 distinct moby github.com/moby/buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in moby github.com/moby/buildkit CVEs?

moby github.com/moby/buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

How many critical moby github.com/moby/buildkit vulnerabilities are there?

moby github.com/moby/buildkit has 3 critical and 2 high-severity CVEs.

What is the average severity of moby github.com/moby/buildkit CVEs?

The average CVSS base score across moby github.com/moby/buildkit's scored CVEs is 7.3.

moby github.com/moby/buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: moby github.com/moby/buildkit vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

moby github.com/moby/buildkit Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

moby github.com/moby/buildkit has 9 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting moby github.com/moby/buildkit, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of moby github.com/moby/buildkit's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High2

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of moby github.com/moby/buildkit's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No moby github.com/moby/buildkit CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every moby github.com/moby/buildkit version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.12.54 CVEs
< 0.28.12 CVEs
< 0.31.12 CVEs
0.10.0 <= v < 0.11.41 CVE

Fixed in

0.12.54 CVEs
0.28.12 CVEs
0.31.12 CVEs
0.11.41 CVE

Find a version

9 CVEs

Sort

BuildKit: Custom frontend could bypass Seccomp/AppArmor
CVE-2026-61711
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.4% (29th pct)2026-08-19
BuildKit: Possible runtime DoS via unbounded group parsing
CVE-2026-61712
Patch
CWE-770
Low · CVSS 2.3
EPSS 0.4% (34th pct)2026-08-19
BuildKit Git URL subdir component can cause access to restricted files
CVE-2026-33748
Patch
CWE-59
High · CVSS 8.2
EPSS 0.5% (38th pct)2026-03-27
BuildKit vulnerable to malicious frontend causing file escape outside of storage root
CVE-2026-33747
Patch
CWE-22
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2026-03-27
Critical vulnerability · 2024-01-31
CVE-2024-23653
Patch
CWE-863
Critical · CVSS 9.8
EPSS 3.0% (86th pct)2024-01-31
BuildKit possible host system access from mount stub cleaner
CVE-2024-23652
Patch
CWE-22
Critical · CVSS 10.0
EPSS 2.1% (80th pct)2024-01-31
High vulnerability · 2024-01-31
CVE-2024-23651
Patch
CWE-362
High · CVSS 8.7
EPSS 0.8% (54th pct)2024-01-31
BuildKit possible panic when incorrect parameters sent from frontend
CVE-2024-23650
Patch
CWE-754
Medium · CVSS 5.3
EPSS 1.0% (59th pct)2024-01-31
Medium vulnerability · 2023-03-06
CVE-2023-26054
Patch
CWE-200
Medium · CVSS 6.5
EPSS 1.0% (61th pct)2023-03-06

Common weakness types

The CWE weakness categories most often found in moby github.com/moby/buildkit CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many moby github.com/moby/buildkit CVEs were published each year.

2023

2024

2026

Other moby products

Browse vulnerabilities for other products by moby.

moby34 CVEs github.com/moby/moby18 CVEs buildkit16 CVEs github.com/moby/moby/v25 CVEs hyperkit5 CVEs Docker Engine2 CVEs github.com/moby/go-archive1 CVEs github.com/moby/spdystream1 CVEs

Frequently asked questions

Common questions about moby github.com/moby/buildkit vulnerabilities.

How many CVEs does moby github.com/moby/buildkit have?: moby github.com/moby/buildkit has 9 published CVE records since 2023.
How many moby github.com/moby/buildkit CVEs are in CISA KEV?: None of moby github.com/moby/buildkit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for moby github.com/moby/buildkit vulnerabilities?: No moby github.com/moby/buildkit CVEs currently have a tracked public exploit in this dataset.
Which versions of moby github.com/moby/buildkit are affected?: 8 distinct moby github.com/moby/buildkit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in moby github.com/moby/buildkit CVEs?: moby github.com/moby/buildkit's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
How many critical moby github.com/moby/buildkit vulnerabilities are there?: moby github.com/moby/buildkit has 3 critical and 2 high-severity CVEs.
What is the average severity of moby github.com/moby/buildkit CVEs?: The average CVSS base score across moby github.com/moby/buildkit's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track moby github.com/moby/buildkit vulnerabilities

Monitor new moby github.com/moby/buildkit vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing