Database/Container, Kubernetes & orchestration
BuildKit: Insufficient validation of git URL fragment subdir allows access to files outside the intended checkout
CVE-2026-33748Container, Kubernetes & orchestrationcurated
Impact
Insufficient validation of git URL fragment subdir allows access to files outside the intended checkout
Who can reach it
Anyone who can submit a build
What to do
Upgrade BuildKit to 0.28.1+
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.