mobyproject

Git source checkout from a bundle file could lead to command injection

Possible panic when incorrect parameters sent from frontend

Malicious client can bypass destination directory validation on local sources upload

LLB file operation can be tricked to remove /tmp directory contents

WCOW cache mount source selector resolves NTFS junctions outside of cache root

Moby: Race condition in docker cp allows bind mount redirection to host path

Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

BuildKit Git URL subdir component can cause access to restricted files

BuildKit vulnerable to malicious frontend causing file escape outside of storage root

Moby's Firewalld reload removes bridge network isolation