---
id: 4368
title: "Audit of Cloud Native Buildpacks"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/audit-of-cloud-native-buildpacks.html"
published_at: "2024-07-15T22:00:00Z"
tags: ["cloud", "container-security", "vulnerability", "audit", "ostif", "cncf", "cloud-native-buildpacks"]
phying_url: "https://phying.com/item/4368"
lang: en
---

# Audit of Cloud Native Buildpacks

## Summary

Quarkslab's assessment of Cloud Native Buildpacks (OSTIF): eight vulnerabilities, from host compromise via overwritten trusted images to cross-app cache poisoning, privilege escalation and DoS.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2024-07-15T22:00:00Z
- **Original:** https://blog.quarkslab.com/audit-of-cloud-native-buildpacks.html
- **Phying News:** https://phying.com/item/4368