Go/github.com/moby/buildkit CVE-2024-23651: unknown, EPSS 0.91%

Host system file access in github.com/moby/buildkit

Action: Upgrade github.com/moby/buildkit to 0.12.5 or later.

go get github.com/moby/buildkit@v0.12.5

Affected

Fixed versions

Sources

• osv: GO-2024-2493
• https://github.com/moby/buildkit/pull/4604

CVE-2024-23651 · published 2024-02-13T18:23:00Z · modified 2026-02-04T03:54:04.291374Z · JSON