Threats affecting pkg:github/github.com/docker/buildx

CVE-2026-93325 is a vulnerability in Docker Buildx where the protection mechanism requiring user consent before allowing builds to access paths outside the working directory can be bypassed when using the --progress=rawjson option. This causes the consent step to be skipped, potentially allowing unauthorized access during the build process. The issue affects Docker Buildx versions from 0.21.0 up to but not including 0.37.2 and has been fixed in version 0.37.2.