https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:04:53 +0000 https://db.gcve.eu/vuln/ghsa-4c29-8rgm-jvjj <p><strong>Affected:</strong> Go: github.com/moby/buildkit</p> <p>### Impact When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.</p> <p>### Patches The issue has been fixed in v0.28.1+</p> <p>### Workarounds Issue requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.</p> <p><strong>Affected:</strong> Go: github.com/moby/buildkit</p> <p>### Impact When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.</p> <p>### Patches The issue has been fixed in v0.28.1+</p> <p>### Workarounds Issue requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.</p> https://db.gcve.eu/vuln/ghsa-4c29-8rgm-jvjj