Every CVE whose affected-product data names Mobyproject Buildkit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (12)
CVE-2024-23652 — CVSS 10.0 (critical): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit…
CVE-2024-23653 — CVSS 9.8 (critical): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to…
CVE-2024-23651 — CVSS 8.7 (high): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build…
CVE-2026-33747 — CVSS 8.4 (high): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version…
CVE-2026-15792 — CVSS 7.5 (high): A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
CVE-2026-15793 — CVSS 7.5 (high): BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git…
CVE-2026-33748 — CVSS 7.5 (high): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version…
CVE-2026-15788 — CVSS 7.5 (high): BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed…
CVE-2026-15789 — CVSS 7.5 (high): A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state…
CVE-2026-15791 — CVSS 7.5 (high): A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can…
CVE-2023-26054 — CVSS 6.5 (medium): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions…
CVE-2024-23650 — CVSS 5.3 (medium): BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit…