Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-93317

Опубликовано: 05 окт. 2026
Источник: nvd
EPSS Низкий

Описание

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity.

EPSS

Процентиль: 5%
0.00162
Низкий

Дефекты

CWE-354

Связанные уязвимости

ubuntu
около 1 месяца назад

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity.

CVSS3: 6.5
redhat
около 1 месяца назад

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity.

debian
около 1 месяца назад

An unauthenticated attacker controlling a registry or OCI-layout blob ...

CVSS3: 7.4
redos
8 дней назад

Уязвимость buildkit

CVSS3: 7.4
redos
8 дней назад

Уязвимость buildkit

EPSS

Процентиль: 5%
0.00162
Низкий

Дефекты

CWE-354