GO-2026-6255

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

En bref

Publiée: 2026-08-25 15:00 UTC
Mise à jour: 2026-09-01 21:56 UTC
CVE: CVE-2026-61711
Alias: GHSA-7236-3392-c5c6

Description

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

Paquets affectés

Paquet	Versions
Go · github.com/moby/buildkit	introduced 0, fixed 0.31.1

Références

https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database