| CVE-2026-121541 |
Bake filesystem path entitlements approval can be skipped in some multi-target builds
|
5.6
Medium
|
Nov 3, 2026 |
| CVE-2026-121542 |
Bake filesystem path entitlements approval can be skipped for path using basename prefix
|
1.8
Low
|
Nov 3, 2026 |
| CVE-2026-93325 |
Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
|
7.3
High
|
Nov 3, 2026 |
| CVE-2026-103433 |
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
|
6.9
Medium
|
Oct 5, 2026 |