VDB
GO-2026-4859
GO-2026-4859
PUBLISHED
BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | osv-scanner | 0, 0 |
| wolfi | osv-scanner | 0, 0, 0 |
| chainguard | docker-cli-buildx | 0, 0 |
| chainguard | scorecard | 0, 0 |
| chainguard | buildah-fips | 0, 0 |
| chainguard | docker-compose | 0, 0 |
| chainguard | podman-fips-5.8 | *, * |
| wolfi | kubescape | 0, 0, 0 |
| wolfi | kaniko | 0, 0, 0 |
| chainguard | conftest-fips | 0, 0 |
| chainguard | docker-compose-fips | 0, 0 |
| chainguard | kubescape-server | 0, 0, 0 |
| chainguard | kubescape | 0, 0, 0 |
| wolfi | podman | 0, 0, 0 |
| chainguard | skaffold-fips | 0, 0 |
| chainguard | cloudbeat-9.3 | 0, 0 |
| chainguard | cloudbeat-9.2 | 0, 0 |
| chainguard | livekit-cli | 0, 0, 0 |
| chainguard | zot | 0, 0 |
| wolfi | trivy-operator | 0, 0, 0 |
…and 29 more
Timeline
- Mar 27, 2026 CVE Published
- Mar 28, 2026 CVE Updated