agentprime: moby-buildkitEvery new CVE for moby-buildkit.https://agentprime.io/CVE-2026-121520: Malicious client could set xattr value outside of BuildKit state directoryhttps://agentprime.io/advisories/CVE-2026-121520/https://agentprime.io/advisories/CVE-2026-121520/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:11:57 GMTCVECVE-2026-121522: Possible panic from Git source resolverhttps://agentprime.io/advisories/CVE-2026-121522/https://agentprime.io/advisories/CVE-2026-121522/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:09:29 GMTCVECVE-2026-93321: Malformed LLB file operation can crash buildkitdhttps://agentprime.io/advisories/CVE-2026-93321/https://agentprime.io/advisories/CVE-2026-93321/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 22:00:54 GMTCVECVE-2026-93315: BuildKit proxy CA cleanup can be disrupted by build stepshttps://agentprime.io/advisories/CVE-2026-93315/https://agentprime.io/advisories/CVE-2026-93315/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 21:57:08 GMTCVECVE-2026-93326: Crafted Git build source can bypass certain policy validationhttps://agentprime.io/advisories/CVE-2026-93326/https://agentprime.io/advisories/CVE-2026-93326/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 20:13:27 GMTCVECVE-2026-93323: Oversized Dockerfile or .dockerignore can exhaust buildkitd memoryhttps://agentprime.io/advisories/CVE-2026-93323/https://agentprime.io/advisories/CVE-2026-93323/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:57:12 GMTCVECVE-2026-93322: Malformed MergeOp can crash the BuildKit daemonhttps://agentprime.io/advisories/CVE-2026-93322/https://agentprime.io/advisories/CVE-2026-93322/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:53:50 GMTCVECVE-2026-93320: BuildKit improperly handles special files in build snapshotshttps://agentprime.io/advisories/CVE-2026-93320/https://agentprime.io/advisories/CVE-2026-93320/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:50:44 GMTCVECVE-2026-93319: A malicious frontend can cause a daemon panichttps://agentprime.io/advisories/CVE-2026-93319/https://agentprime.io/advisories/CVE-2026-93319/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:47:22 GMTCVECVE-2026-93318: Cache poisoning via unvalidated image layer DiffIDshttps://agentprime.io/advisories/CVE-2026-93318/https://agentprime.io/advisories/CVE-2026-93318/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:45:39 GMTCVECVE-2026-93317: Container blob cache can accept unverified contenthttps://agentprime.io/advisories/CVE-2026-93317/https://agentprime.io/advisories/CVE-2026-93317/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:43:44 GMTCVECVE-2026-93316: Starting daemon with --cdi-disabled flag can lead to panic on specific buildshttps://agentprime.io/advisories/CVE-2026-93316/https://agentprime.io/advisories/CVE-2026-93316/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 17:42:12 GMTCVECVE-2026-75593: BuildKit: Malicious client can bypass destination directory validation on local sources uploadhttps://agentprime.io/advisories/CVE-2026-75593/https://agentprime.io/advisories/CVE-2026-75593/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:06:54 GMTCVECVE-2026-15793: Git source checkout from a bundle file could lead to command injectionhttps://agentprime.io/advisories/CVE-2026-15793/https://agentprime.io/advisories/CVE-2026-15793/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 16:10:21 GMTCVECVE-2026-15792: Possible panic when incorrect parameters sent from frontendhttps://agentprime.io/advisories/CVE-2026-15792/https://agentprime.io/advisories/CVE-2026-15792/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 16:10:21 GMTCVECVE-2026-15791: LLB file operation can be tricked to remove /tmp directory contentshttps://agentprime.io/advisories/CVE-2026-15791/https://agentprime.io/advisories/CVE-2026-15791/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 16:10:20 GMTCVECVE-2026-15789: Malicious client can bypass destination directory validation on local sources uploadhttps://agentprime.io/advisories/CVE-2026-15789/https://agentprime.io/advisories/CVE-2026-15789/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 16:10:20 GMTCVECVE-2026-15788: WCOW cache mount source selector resolves NTFS junctions outside of cache roothttps://agentprime.io/advisories/CVE-2026-15788/https://agentprime.io/advisories/CVE-2026-15788/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 19:12:56 GMTCVE