docker github.com/docker/buildx vulnerabilities

Latest docker github.com/docker/buildx CVEs

Newest publication first

1. CVE-2025-0495 Secrets leakage to telemetry endpoint via cache backend configuration via buildx

   Published 2025-03-17

   Medium·CVSS 4.1 EPSS 0.20%

   Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.