GHSA-72X6-4J93-7W86 BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: k3s, kube-oidc-proxy, prometheus-adapter, rancher-webhook-fips, buildkitd, kubevela, kubernetes-fips, rancher-webhook, caddy, up, kubernetes, metrics-server-fips...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: k3s, podman, docker, kubernetes, runc, k9s, kots, zarf, grype, nerdctl, syft, cadvisor, ctop, skaffold, kaniko, zot, k3d, wolfictl, skopeo, trivy, buildkitd, newrelic-infrastructure-agent, kubescape...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: conftest-fips, scorecard, docker, skaffold, trivy, buildkitd, conftest, kaniko, zot, guac, kubescape...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: conftest-fips, scorecard, docker, skaffold, trivy, buildkitd, conftest, kaniko, zot, guac, kubescape...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: conftest-fips, scorecard, docker, skaffold, trivy, buildkitd, conftest, kaniko, zot, guac, kubescape...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: conftest-fips, scorecard, docker, skaffold, trivy, buildkitd, conftest, kaniko, zot, guac, kubescape...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: dagger, docker, nerdctl-fips, xeol-fips, amazon-ecs-agent-fips, headlamp, helm-diff, opa-fips-envoy, cluster-api-helm-controller-fips, newrelic-infrastructure-agent-fips, flux-source-controller, rancher-fleet, fuse-overlayfs-snapshotter, cilium-cli, headlamp-fips,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: dagger, docker, xeol-fips, buildkitd-fips, amazon-ecs-agent-fips, headlamp, spegel-fips, cluster-api-helm-controller-fips, newrelic-infrastructure-agent-fips, fuse-overlayfs-snapshotter, headlamp-fips, docker-fips, ctop, kaniko, zot, packer-fips, harvester, wolfictl,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: docker, k9s, kots, k3d, zarf, k3s, kubescape, grype, kubernetes, newrelic-infrastructure-agent, syft, podman, runc, skaffold, ctop, wolfictl, zot, buildkitd, kaniko, trivy, cadvisor, nerdctl, skopeo...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: docker, teleport, crossplane, goreleaser, sigstore-scaffolding, zarf, policy-controller, kubescape, kyverno-notation-aws, skaffold, cosign, gitsign, ko, trivy-operator, vexctl, zot, buildkitd, tkn, trivy, spire-server, flux-source-controller, gh, kyverno, falcoctl,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kots, k3d, cilium-cli, k8sgpt, kubescape, grype, up, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, eksctl, skaffold, ctop, flux-helm-controller, helm-push, zot, melange, kubevela, buildkitd, kaniko, trivy, helm, flux-source-controller, gitness...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: docker, kubescape, zot, buildkitd, scorecard, guac, kaniko, skaffold, trivy, conftest...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, caddy, up, kubevela, kubernetes, buildkitd, k3s...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: docker, kubescape, zot, buildkitd, scorecard, guac, kaniko, skaffold, trivy, conftest...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: docker, kubescape, zot, buildkitd, scorecard, guac, kaniko, skaffold, trivy, conftest...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: docker, kubescape, zot, buildkitd, scorecard, guac, kaniko, skaffold, trivy, conftest...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, temporal-server, kubescape, docker-compose, temporal, metrics-server, kine, kubernetes-csi-external-resizer, cri-tools, kubevela, buildkitd, kubernetes, envoy-ratelimit, k3s...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: docker, multus-cni, nerdctl, flannel, containerd, istio, kuma, buildkitd, k3s, podman, calico, rootlesskit, azure-ipam, buildah, datadog-agent...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...