https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T06:04:53.800615+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-4c29-8rgm-jvjj GHSA-4c29-8rgm-jvjj — BuildKit's Malicious frontend can cause file escape outside of storage root 2026-10-04T06:04:53.801973+00:00

Affected: Go: github.com/moby/buildkit

### Impact When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.

### Patches The issue has been fixed in v0.28.1+

### Workarounds Issue requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.