https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T01:58:32.148682+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-15793 CVE-2026-15793 — Git source checkout from a bundle file could lead to command injection 2026-10-02T01:58:32.248181+00:00

Affected: moby BuildKit

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.