moby-buildx vulnerabilities (Azure Linux)

9 vulnerabilities.

• moby-buildx Azure Linux Logrus is vulnerable to DoS when using Entry.Writer() CVE-2025-65637 Public exploitFix available 7.5 HighDecember 4, 2025
• moby-buildx Azure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure CVE-2025-11065 Fix available 5.3 MediumAugust 21, 2025
• moby-buildx Azure Linux Secrets leakage to telemetry endpoint via cache backend configuration via buildx CVE-2025-0495 Fix available 4.1 MediumMarch 17, 2025
• moby-buildx Azure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf CVE-2024-24786 Fix available 7.5 HighMarch 5, 2024
• moby-buildx Azure Linux BuildKit interactive containers API does not validate entitlements check CVE-2024-23653 Public exploitFix available 9.8 CriticalJanuary 31, 2024
• moby-buildx Azure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• moby-buildx Azure Linux Uncontrolled Resource Consumption in promhttp CVE-2022-21698 Fix available 7.5 HighFebruary 15, 2022
• moby-buildx Azure Linux x/crypto/ssh vulnerable to panic via malformed packets CVE-2021-43565 Fix available 7.5 HighJanuary 10, 2022
• moby-buildx Azure Linux golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021