IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.3Hoch

CVE-2026-93325Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Docker Docker Buildx Veröffentlicht: (vor 7 Tagen)

Beschreibung

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.

Schwachstellentyp (CWE): CWE-693

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Docker Docker Buildx 0.21.0 – < 0.37.2

Referenzen und Patches

Neue CVEs im selben Produkt — Docker / Moby

5.7Mittel
CVE-2026-123082

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

6.7Mittel
CVE-2026-121522

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.