StackRadar

CVE-2026-33747

Critical

Advisory

Published 26 Mar 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
77
of 17,781 indexed, latest versions
Container images
68
deployed by those charts
Fix available
2 of 2
affected packages

BuildKit's Malicious frontend can cause file escape outside of storage root

Carried by container images the latest versions of 77 of 17,781 indexed charts deploy, on 68 images.

Affected packageAffected versionsFixed inImages
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
github.com/moby/buildkitgolangv0.0.0-20181107081847-c3a857e3fca0, v0.0.0-20260906160352-29f5975892d6, v0.7.2, v0.8.1+27 more0.28.166
OSV records
DEBIAN-CVE-2026-33747GHSA-4c29-8rgm-jvjj
Also known as
GO-2026-4858

Charts affected

77 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/moby/buildkit@v0.26.2
0.28.1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/moby/buildkit@v0.26.2
0.28.1

Open the chart page →

10,755
portainerportainer245.0.01 of 1See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.45.0511f3f06c96f
github.com/moby/buildkit@v0.25.1
0.28.1

Open the chart page →

277
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/moby/buildkit@v0.26.3
0.28.1

Open the chart page →

1,891
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/moby/buildkit@v0.8.3
0.28.1

Open the chart page →

4,167
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
github.com/moby/buildkit@v0.11.2
0.28.1

Open the chart page →

5,674
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/moby/buildkit@v0.11.6
0.28.1

Open the chart page →

3,675
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/moby/buildkit@v0.9.3
0.28.1

Open the chart page →

3,793
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/moby/buildkit@v0.10.1-0.20220816171719-55ba9d14360a
0.28.1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/moby/buildkit@v0.12.5
0.28.1

Open the chart page →

28,534
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
docker.io@26.1.5+dfsg1-9+b13
26.1.5+dfsg1-9+deb13u1

Open the chart page →

5,880
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/moby/buildkit@v0.11.6
0.28.1

Open the chart page →

2,898
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/moby/buildkit@v0.11.0
0.28.1

Open the chart page →

5,598
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/moby/buildkit@v0.11.0-rc3.0.20230609092854-67a08623b95a
0.28.1

Open the chart page →

2,576
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/moby/buildkit@v0.16.0
0.28.1

Open the chart page →

1,542
hiverhiverVerified publisher0.1.451 of 10See more

hiver hiver 0.1.45

1 of the 10 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
hiversh/controller:0.1.45b0b85f8942c7
docker.io@20.10.24+dfsg1-1+deb12u1+b6
no fix listed

Open the chart page →

21,672
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/moby/buildkit@v0.11.5
0.28.1

Open the chart page →

3,274
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/moby/buildkit@v0.22.0
0.28.1

Open the chart page →

2,113
artifact-hubsoftonic1.19.04 of 8See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/moby/buildkit@v0.11.6
0.28.1
artifacthub/hub:v1.19.0111918d8c399
github.com/moby/buildkit@v0.13.2
0.28.1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/moby/buildkit@v0.13.2
0.28.1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/moby/buildkit@v0.13.2
0.28.1

Open the chart page →

14,491
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

4,547
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
github.com/moby/buildkit@v0.25.1
0.28.1

Open the chart page →

9,847
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/moby/buildkit@v0.8.1
0.28.1

Open the chart page →

5,202
buildkitbuildkit0.1.01 of 1See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
moby/buildkit:master-rootless07115a67cd22
github.com/moby/buildkit@v0.0.0-20260906160352-29f5975892d6
0.28.1

Open the chart page →

620
buildkit-privilegedbuildkit-privileged0.1.01 of 1See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
moby/buildkit:masterbc964521ee58
github.com/moby/buildkit@v0.0.0-20260906160352-29f5975892d6
0.28.1

Open the chart page →

403
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
github.com/moby/buildkit@v0.22.0
0.28.1

Open the chart page →

14,130
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0
0.28.1

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0
0.28.1

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0
0.28.1

Open the chart page →

6,921
ocs-operatorcloud-native-toolkit0.2.41 of 1See more

ocs-operator cloud-native-toolkit 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/moby/buildkit@v0.12.5
0.28.1

Open the chart page →

369
refarch-infraconfigcloud-native-toolkit0.2.21 of 1See more

refarch-infraconfig cloud-native-toolkit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/moby/buildkit@v0.12.5
0.28.1

Open the chart page →

369
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/moby/buildkit@v0.13.2
0.28.1

Open the chart page →

7,168
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
github.com/moby/buildkit@v0.19.0
0.28.1
library/docker:27-dindaa3df78ecf32
github.com/moby/buildkit@v0.19.0
0.28.1

Open the chart page →

19,338
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/moby/buildkit@v0.12.5
0.28.1

Open the chart page →

1,885
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/moby/buildkit@v0.11.6
0.28.1

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/moby/buildkit@v0.11.6
0.28.1

Open the chart page →

68,240
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/moby/buildkit@v0.7.2
0.28.1

Open the chart page →

3,046
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

4,547
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/moby/buildkit@v0.26.2
0.28.1

Open the chart page →

3,376
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/moby/buildkit@v0.16.0
0.28.1

Open the chart page →

2,590
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1

Open the chart page →

4,547
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/moby/buildkit@v0.25.1
0.28.1

Open the chart page →

6,952
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/moby/buildkit@v0.13.0
0.28.1

Open the chart page →

3,999
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/moby/buildkit@v0.15.1
0.28.1

Open the chart page →

1,893
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
github.com/moby/buildkit@v0.25.0
0.28.1

Open the chart page →

2,034
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/moby/buildkit@v0.13.0-beta1.0.20231023114302-d5c1d785b042
0.28.1

Open the chart page →

3,507
kubecheckskubechecks3.0.01 of 1See more

kubechecks kubechecks 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
ghcr.io/zapier/kubechecks:latest60cea46ce830
github.com/moby/buildkit@v0.26.2
0.28.1

Open the chart page →

548
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/moby/buildkit@v0.10.3
0.28.1

Open the chart page →

17,798
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/moby/buildkit@v0.22.0
0.28.1

Open the chart page →

2,113
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33747.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/moby/buildkit@v0.10.4
0.28.1

Open the chart page →

4,271

Container images carrying it

68 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1
7
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/moby/buildkit@v0.12.5
0.28.1
7
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/moby/buildkit@v0.11.2
0.28.1
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/moby/buildkit@v0.11.6
0.28.1
3
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/moby/buildkit@v0.22.0
0.28.1
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0
0.28.1
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0
0.28.1
2
1dev/server:11.9.0cd5b12fe5471
github.com/moby/buildkit@v0.21.0
0.28.1
1
appwrite/appwrite:1.9.01aaa70127114
github.com/moby/buildkit@v0.25.1
0.28.1
1
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/moby/buildkit@v0.25.1
0.28.1
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/moby/buildkit@v0.12.5
0.28.1
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/moby/buildkit@v0.8.1
0.28.1
1
aquasec/trivy:0.43.1944a04445179
github.com/moby/buildkit@v0.11.6
0.28.1
1
aquasec/trivy:0.32.0973d0df16189
github.com/moby/buildkit@v0.10.4
0.28.1
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/moby/buildkit@v0.26.2
0.28.1
1
artifacthub/hub:v1.19.0111918d8c399
github.com/moby/buildkit@v0.13.2
0.28.1
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/moby/buildkit@v0.26.2
0.28.1
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/moby/buildkit@v0.13.2
0.28.1
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/moby/buildkit@v0.13.2
0.28.1
1
datadog/agent:6aad9994de6a7
github.com/moby/buildkit@v0.13.0
0.28.1
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/moby/buildkit@v0.11.0
0.28.1
1
dollarshaveclub/furan2:master14a257836529
github.com/moby/buildkit@v0.7.2
0.28.1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/moby/buildkit@v0.16.0
0.28.1
1
gitea/act_runner:nightly7940221bcfc9
github.com/moby/buildkit@v0.13.2
0.28.1
1
gitea/act_runner:0.3.1c2a169c5e998
github.com/moby/buildkit@v0.13.2
0.28.1
1
gitea/act_runner:0.2.11c57233403eff
github.com/moby/buildkit@v0.12.5
0.28.1
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/moby/buildkit@v0.26.2
0.28.1
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/moby/buildkit@v0.10.3
0.28.1
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/moby/buildkit@v0.11.6
0.28.1
1
hashicorp/waypoint:0.11.397d521a27498
github.com/moby/buildkit@v0.8.3
0.28.1
1
hiversh/controller:0.1.45b0b85f8942c7
docker.io@20.10.24+dfsg1-1+deb12u1+b6
no fix listed
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/moby/buildkit@v0.13.0-beta1.0.20231023114302-d5c1d785b042
0.28.1
1
library/docker:24.0.2-dind1d148deae16a
github.com/moby/buildkit@v0.11.0-rc3.0.20230609092854-67a08623b95a
0.28.1
1
library/docker:28.5.2-dind2a232a42256f
github.com/moby/buildkit@v0.25.0
0.28.1
1
library/docker:20.10.21-dind3153fa63f546
github.com/moby/buildkit@v0.10.1-0.20220816171719-55ba9d14360a
0.28.1
1
library/docker:27-cli851f91d24121
github.com/moby/buildkit@v0.19.0
0.28.1
1
library/docker:27-dindaa3df78ecf32
github.com/moby/buildkit@v0.19.0
0.28.1
1
library/docker:23.0.6-dindafa5d5134900
github.com/moby/buildkit@v0.12.2
0.28.1
1
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/moby/buildkit@v0.11.5
0.28.1
1
library/docker:26.1-dinddd43b430341a
github.com/moby/buildkit@v0.15.0
0.28.1
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/moby/buildkit@v0.10.1-0.20220403220257-10e6f94bf90d
0.28.1
1
moby/buildkit:master-rootless07115a67cd22
github.com/moby/buildkit@v0.0.0-20260906160352-29f5975892d6
0.28.1
1
moby/buildkit:masterbc964521ee58
github.com/moby/buildkit@v0.0.0-20260906160352-29f5975892d6
0.28.1
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
docker.io@26.1.5+dfsg1-9+b13
26.1.5+dfsg1-9+deb13u1
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/moby/buildkit@v0.11.5
0.28.1
1
portainer/portainer-ce:2.45.0511f3f06c96f
github.com/moby/buildkit@v0.25.1
0.28.1
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/moby/buildkit@v0.12.5
0.28.1
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/moby/buildkit@v0.22.0
0.28.1
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/moby/buildkit@v0.11.6
0.28.1
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/moby/buildkit@v0.11.6
0.28.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.