Haoxiang Yan

An unauthenticated attacker who controls a registry or OCI-layout blob source can provide blob contents that do not match the claimed digest. This allows a snapshot to be cached under the incorrect digest and subsequently reused by a later victim build, which compromises the integrity of the build-input.

A malicious frontend can submit a Low-Level Builder (LLB) definition that causes the `buildkitd` daemon to panic and terminate. This action results in the interruption of all active builds running on that specific daemon.

A malicious frontend can submit a Low-Level Builder (LLB) definition that causes the `buildkitd` daemon to panic and terminate. This action results in the interruption of all active builds running on that specific daemon.