CVE-2026-33748 BuildKit Git URL subdir component can cause access to restricted files

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748 BuildKit Git URL subdir component can cause access to restricted files

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-33748

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is...

CVE-2026-34243

creationtimestamp| type| source ---|---|--- 2026-03-27 12:52:58+00:00| published-proof-of-concept| https://github.com/njzjz/wenxian/security/advisories/GHSA-r4fj-r33x-8v88 2026-03-31 16:28:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mieluuzr2r2c 2026-03-31...

CVE-2026-27858

creationtimestamp| type| source ---|---|--- 2026-03-27 09:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116300319602682921 2026-03-27 09:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhzqyd3ezr2r 2026-03-27 11:16:46+00:00| seen|...

CVE-2026-4908

creationtimestamp| type| source ---|---|--- 2026-03-27 04:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhzahqhxyx24 2026-03-27 05:02:51+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhzdovd6w72z 2026-03-27 05:15:30+00:00| published-proof-of-concept|...

CVE-2026-33725

creationtimestamp| type| source ---|---|--- 2026-03-27 03:17:50+00:00| published-proof-of-concept| Telegram/GblWBcVIPYIrXGBoPy7bAM0O64UdRepvGT6caCd3l3fA 2026-04-24 08:31:48+00:00| published-proof-of-concept| Telegram/LtB9Y94c6PJKjHswsiVaIiSzQ94DvfwAx2TFj5qjA9N4fg 2026-04-24 08:31:50+00:00|...

CVE-2026-33701

creationtimestamp| type| source ---|---|--- 2026-03-27 02:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhz4bjog5422 2026-03-27 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298903055981699 2026-03-27 03:00:32+00:00| seen|...

CVE-2026-33728

creationtimestamp| type| source ---|---|--- 2026-03-27 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhyxta3ux52y 2026-03-27 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298549180324287 2026-03-27 03:05:08+00:00| seen|...

CVE-2026-33697

creationtimestamp| type| source ---|---|--- 2026-03-27 01:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4nni6v2s 2026-03-27 01:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw5dztap2m 2026-03-27 01:18:53+00:00| seen|...

CVE-2026-33898

creationtimestamp| type| source ---|---|--- 2026-03-27 00:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysuuob4v2n 2026-03-27 01:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4vmu3g2w 2026-03-27 01:00:34+00:00| seen|...

Grafana -- Public dashboards discloses all direct mode datasources

https://grafana.com/security/security-advisories/cve-2026-27877 reports: When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-source...

Grafana 安全漏洞

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has security vulnerabilities; these vulnerabilities arise from...

PT-2026-28370

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description When using public dashboards and direct data-sources, passwords for direct data-sources are exposed even if they are not actively used in dashboards. Passwords for proxied data-sources are n...

CVE-2026-33945

creationtimestamp| type| source ---|---|--- 2026-03-26 23:59:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysrbvxdo2i 2026-03-27 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298196062602424 2026-03-27 00:00:44+00:00| seen|...

CVE-2026-33686

creationtimestamp| type| source ---|---|--- 2026-03-26 22:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn3ypzwa2x 2026-03-26 22:18:36+00:00| seen| https://bsky.app/profile/potato.software/post/3mhyn3zn4td2z 2026-03-26 22:56:19+00:00| seen|...

CVE-2026-33152

creationtimestamp| type| source ---|---|--- 2026-03-26 19:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116297133534658631 2026-03-26 19:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhydphpyav2b 2026-03-26 20:34:21+00:00| seen|...

CVE-2026-33530

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33530 2026-03-26 19:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfafsvbz2n 2026-03-26 21:01:09+00:00| seen|...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack when processing Git URL fragment subdir components. An attacker can access files outside the intended Git repository root by specifying a crafted subdir value in the URL fragment. Note: This is only exploitable if builds...

BuildKit Git URL subdir component can cause access to restricted files

Impact Insufficient validation of Git URL fragment subdir components :, docs may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. Patches The issue has been fixed in version v0.28.1 Workarounds The issue affects...