SUSE CVE-2026-42575

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...

CVE-2026-42575

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dmifud2f 2026-05-09 21:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6woiu5p2p 2026-05-10 03:00:27+00:00| seen|...

CVE-2026-42575 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent-fips, dagdotdev...