Advisories · Technology
Docker Buildx.
Every CVE that names Docker Buildx among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.6 Medium
Bake filesystem path entitlements approval can be skipped in some multi-target builds
- Docker Buildx
- Broken access control
- CVSS 1.8 Low
Bake filesystem path entitlements approval can be skipped for path using basename prefix
- Docker Buildx
- Path traversal
- CVSS 7.3 High
Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
- Docker Buildx
- CWE-693
- CVSS 6.9 Medium
Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
- Docker Buildx
- Broken access control