1 matches found
Chainguard Forks caniko input validation error vulnerability
Versions of Chainguard Forks prior to Kaniko 1.25.20 contain a security vulnerability. This vulnerability arises from using unanchored regular expressions to validate ACR registries, allowing spoofed hosts containing strings such as .azurecr.io to be accepted. As a result, Microsoft Entra ID acce...
9.3CVSS5.9AI score0.00196EPSS
SaveExploits0References5
20