{"schema":"vulnpedia.research/1","cve":"CVE-2026-93319","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"Docker","modified":"2026-10-05T17:47:22.297Z","origins":[{"source":"mitre","sourceId":"Docker","modified":"2026-10-05T17:47:22.297Z","url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8"},{"source":"nvd","sourceId":"CVE-2026-93319","modified":"2026-10-06T15:08:38.397","url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8"},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8"}]},{"url":"https://github.com/moby/buildkit/releases/tag/v0.33.1","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"Docker","modified":"2026-10-05T17:47:22.297Z","origins":[{"source":"mitre","sourceId":"Docker","modified":"2026-10-05T17:47:22.297Z","url":"https://github.com/moby/buildkit/releases/tag/v0.33.1"},{"source":"nvd","sourceId":"CVE-2026-93319","modified":"2026-10-06T15:08:38.397","url":"https://github.com/moby/buildkit/releases/tag/v0.33.1"},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://github.com/moby/buildkit/releases/tag/v0.33.1"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93319","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-93319"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546028","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546028"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93319","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-93319"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93319","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93319"}]},{"source":"euvd","sourceId":"EUVD-2026-92534","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92534","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92534","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92534"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","productId":"red_hat_quay_3:quay/quay-builder-rhel8","product":"quay/quay-builder-rhel8 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict builds to trusted internal frontends by avoiding untrusted `#syntax` image directives or custom `--frontend` flags. Isolate multi-tenant build environments onto dedicated, single-tenant worker nodes to prevent shared daemon disruption."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/quay-builder-rhel8?repository_url=registry.redhat.io/quay/quay-builder-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","productId":"red_hat_quay_3:quay/quay-builder-rhel9","product":"quay/quay-builder-rhel9 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict builds to trusted internal frontends by avoiding untrusted `#syntax` image directives or custom `--frontend` flags. Isolate multi-tenant build environments onto dedicated, single-tenant worker nodes to prevent shared daemon disruption."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/quay-builder-rhel9?repository_url=registry.redhat.io/quay/quay-builder-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","productId":"red_hat_hardened_images:buildah.src","product":"buildah.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/buildah@1.45.1-1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","productId":"red_hat_hardened_images:podman.src","product":"podman.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/podman@6.1.3-1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]},{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json","productId":"red_hat_hardened_images:trivy.src","product":"trivy.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/trivy@0.74.0-0.4.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-93319","modified":"2026-10-20T17:54:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93319.json"}]}],"vendorCoverage":{"total":5,"shown":5,"omitted":0,"source":"redhat"}}