containerblob

Mar 3, 2026 GO-2026-4858 +1 more

  GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

  GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit

Changes in this version

+ type ImageBlobIdentifier struct

+ Filename string

+ GID int

+ Perm int

+ RecordType client.UsageRecordType

+ Reference reference.Spec

+ SchemeName string

+ SessionID string

+ StoreID string

+ UID int

+ func NewImageBlobIdentifier(str string, scheme string) (*ImageBlobIdentifier, error)

+ func (id *ImageBlobIdentifier) Capture(c *provenance.Capture, pin string) error

+ func (id *ImageBlobIdentifier) Scheme() string

+ type Source struct

+ func NewSource(opt SourceOpt) (*Source, error)

+ func (is *Source) Identifier(scheme, ref string, attrs map[string]string, platform *pb.Platform) (source.Identifier, error)

+ func (is *Source) Resolve(ctx context.Context, id source.Identifier, sm *session.Manager, ...) (source.SourceInstance, error)

+ func (is *Source) Schemes() []string

+ type SourceOpt struct

+ CacheAccessor cache.Accessor

+ ContentStore content.Store

+ RegistryHosts docker.RegistryHosts

Feb 26, 2026 GO-2026-4858 +1 more

  GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

  GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit

Feb 24, 2026 GO-2026-4858 +1 more

  GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

  GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit