CVE-2026-93319

Опубликовано: 05 окт. 2026

Источник: debian

EPSS Низкий

Описание

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
golang-github-moby-buildkit	itp			package

Примечания

https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8

EPSS

Процентиль: 0%

0.00089

Низкий

Связанные уязвимости

CVE-2026-93319

ubuntu

около 1 месяца назад

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

CVE-2026-93319

CVSS3: 4.7

redhat

около 1 месяца назад

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

CVE-2026-93319

nvd

около 1 месяца назад

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

CVE-2026-93319

msrc

около 1 месяца назад

A malicious frontend can cause a daemon panic

ROS-20261103-80-0011

CVSS3: 5.5

redos

9 дней назад

Уязвимость buildkit

EPSS

Процентиль: 0%

0.00089

Низкий