Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Moby authz zero length regressionCVE-2024-41110moby · CVSS 10 · 16% likelycovered by CyberSIXT

   CWE-187

2. BuildKit possible panic when incorrect parameters sent from frontendCVE-2024-23650moby · CVSS 5.3 · 1.1% likely

   CWE-754

3. BuildKit: Custom frontend could bypass Seccomp/AppArmorCVE-2026-61711moby · CVSS 5.3 · 0.4% likely

   CWE-20

4. Crafted Git build source can bypass certain policy validationCVE-2026-93326moby · CVSS 6 · 0.2% likely

   CWE-180

5. Possible panic when incorrect parameters sent from frontendCVE-2026-15792moby · CVSS 6.3 · 0.2% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.