GO-2024-2494

Affected Products

Timeline

• Feb 12, 2024 CVE Published
• Feb 4, 2026 CVE Updated

References

• https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8 advisory
• https://github.com/moby/buildkit/pull/4603 patch
• https://github.com/moby/buildkit/releases/tag/v0.12.5 url