CVE-2026-93322

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

AZL-106815 CVE-2026-93322 affecting package moby-engine 25.0.3-20

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

AZL-106824 CVE-2026-93323 affecting package moby-engine 25.0.3-20

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

EUVD-2026-92545

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

CVE-2026-93323

The Dockerfile frontend is vulnerable to a memory exhaustion attack because it loads Dockerfile and .dockerignore files into memory without a size limit. An attacker providing a build context with an oversized file can cause buildkitd to allocate proportional memory, potentially leading to a Deni...

CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

EUVD-2026-92542

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93322

The buildkitd daemon is vulnerable to a Denial of Service (DoS) condition where a malicious frontend can submit a malformed LLB definition (specifically involving a malformed MergeOp ). This input causes the daemon to panic and terminate , which interrupts all active builds running on that daemon...

CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93323: Memory Allocation with Excessive Size Value

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

CVE-2026-93322: Improper Validation of Array Index

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

PT-2026-106091

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

PT-2026-106260

Name of the Vulnerable Software and Affected Versions buildkitd affected versions not specified Description A malicious frontend can submit a Low-Level Builder LLB definition that causes the buildkitd daemon to panic and terminate. This action results in the interruption of all active builds...

CVE-2026-93321: Improper Validation of Array Index

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, eksctl, spegel, tigera-operator, steampipe, trivy, dagger, nerdctl, wolfictl, rancher, docker-compose, k9s, kube-arangodb, zot, kargo, helm-operator, cluster-api-helm-controller, chartmuseum, manifest-tool, gatekeeper, zarf, k3s, xeol,...

CLEANSTART-2026-WJ82111 Security fix for GHSA-p436-gjf2-799p applied in: buildkitd 0.26.3-r1, crane 0.18.0-r1, crane 0.19.2-r0, crane 0.20.7-r1

GHSA-p436-gjf2-799p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...