Mobyproject - vulnerabilities (CVEs)
38 CVEs in 4 products, 0 in the last 30 days, newest from 2026-07-21.
Products
Newest CVEs of Mobyproject
- CVE-2026-15792 - CVSS 7.5 (high), 2026-07-21: A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
- CVE-2026-15793 - CVSS 7.5 (high), 2026-07-21: BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is…
- CVE-2026-15791 - CVSS 7.5 (high), 2026-07-21: A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete…
- CVE-2026-15789 - CVSS 7.5 (high), 2026-07-21: A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs…
- CVE-2026-15788 - CVSS 7.5 (high), 2026-07-20: BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root.…
- CVE-2026-42306 - CVSS 7.2 (high), 2026-06-12: Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to…
- CVE-2026-41568 - CVSS 6.1 (medium), 2026-06-12: Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to…
- CVE-2026-33748 - CVSS 8.2 (high), 2026-03-27: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient…
- CVE-2026-33747 - CVSS 9.8 (critical), 2026-03-27: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a…
- CVE-2025-54410 - CVSS 5.2 (medium), 2025-07-30: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other…
- CVE-2025-54388 - CVSS 5.1 (medium), 2025-07-30: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other…
- CVE-2024-36623 - CVSS 8.1 (high), 2024-11-29: moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations…
- CVE-2024-36621 - CVSS 6.5 (medium), 2024-11-29: moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds…
- CVE-2024-36620 - CVSS 6.5 (medium), 2024-11-29: moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
- CVE-2024-32473 - CVSS 6.5 (medium), 2024-04-18: Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.…
- CVE-2024-29018 - CVSS 7.5 (high), 2024-03-20: Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.…
- CVE-2024-24557 - CVSS 7.8 (high), 2024-02-01: Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the…
- CVE-2024-23652 - CVSS 10 (critical), 2024-01-31: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or…
- CVE-2024-23651 - CVSS 8.7 (high), 2024-01-31: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in…
- CVE-2024-23653 - CVSS 9.8 (critical), 2024-01-31: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as…
- CVE-2024-23650 - CVSS 5.3 (medium), 2024-01-31: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend…
- CVE-2023-28842 - CVSS 6.8 (medium), 2023-04-04: Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream…
- CVE-2023-28841 - CVSS 6.8 (medium), 2023-04-04: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream…
- CVE-2023-28840 - CVSS 8.7 (high), 2023-04-04: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream…
- CVE-2023-26054 - CVSS 6.5 (medium), 2023-03-06: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user…
- CVE-2021-32847 - CVSS 7.1 (high), 2023-02-20: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability…
- CVE-2021-32846 - CVSS 7.8 (high), 2023-02-17: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function `pci_vtsock_proc_tx` in `virtio-sock` can lead…
- CVE-2021-32844 - CVSS 6.2 (medium), 2023-02-17: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to…
- CVE-2021-32843 - CVSS 6.2 (medium), 2023-02-17: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to…
- CVE-2021-32845 - CVSS 7.8 (high), 2023-02-17: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify`…
