https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T20:19:11.209364+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121522 fkie_cve-2026-121522 2026-11-08T20:19:11.211589+00:00

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

 https://db.gcve.eu/vuln/rhsa-2026:95611 RHSA-2026:95611 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-11-08T20:19:11.211649+00:00

github.com/moby/buildkit: BuildKit: Privilege escalation via unauthorized extended file attribute modification github.com/moby/buildkit: BuildKit: Denial of Service via duplicate Git source metadata resolution

 https://db.gcve.eu/vuln/ubuntu-cve-2026-121522 UBUNTU-CVE-2026-121522 2026-11-08T20:19:11.211676+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:Pro:22.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:Pro:24.04:LTS: docker.io-app, Ubuntu:26.10: docker.io, Ubuntu:26.10: docker.io-app and 2 more

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4338 WID-SEC-W-2026-4338 — BuildKit: Mehrere Schwachstellen 2026-11-08T20:19:11.211716+00:00

Ein Angreifer kann mehrere Schwachstellen in BuildKit ausnutzen, um Privilegien zu erhöhen oder einen Denial of Service zu verursachen.