Secrets leakage to telemetry endpoint via cache backend configuration via buildx

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-0495 · CVE overview and exploitation status

EUVD-2025-6497

GHSA-m4gq-fm9h-8q75

GO-2025-3527

cve-program · CVE-2025-0495

• https://github.com/docker/buildx

euvd · EUVD-2025-6497

• https://github.com/docker/buildx

nvd · CVE-2025-0495

• https://github.com/docker/buildx

osv · GHSA-m4gq-fm9h-8q75

• https://github.com/docker/buildx/security/advisories/GHSA-m4gq-fm9h-8q75
• https://nvd.nist.gov/vuln/detail/CVE-2025-0495
• https://github.com/docker/buildx/commit/18ccba072076ddbfb0aeedd6746d7719b0729b58
• https://github.com/docker/buildx

osv · GO-2025-3527

• https://github.com/docker/buildx/security/advisories/GHSA-m4gq-fm9h-8q75
• https://nvd.nist.gov/vuln/detail/CVE-2025-0495
• https://github.com/docker/buildx/commit/18ccba072076ddbfb0aeedd6746d7719b0729b58

No related changes are available here.