25 matches found
CVE-2026-105769
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
EUVD-2026-115331
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
CVE-2026-105769
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
CVE-2026-105769
Kaniko versions prior to 1.25.20 are vulnerable to a credential leakage flaw where it can send a Microsoft Entra ID (Azure AD) access token to an attacker-controlled registry. The root cause is the use of the docker-credential-acr-env helper, which employs an unanchored regular expression to iden...
CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
PT-2026-135532
Name of the Vulnerable Software and Affected Versions kaniko versions prior to 1.25.20 Description kaniko may leak a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. This occurs because the Azure Container Registry credential helper...
CVE-2026-105769: chainguard kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…
kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...
GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env
In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...
PT-2026-80446
In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, gitness, dgraph, docker-credential-acr-env-fips...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: dgraph, docker-credential-acr-env, gitness...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, kubernetes-event-exporter, nova, spqr, dask-gateway, spark-operator, lazydocker, rancher-machine, xcover, go-licenses, promxy, newrelic-nri-statsd, wire-go, container-object-storage-interface, cfssl,...
GO-2025-4008 vulnerabilities
Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, kubernetes-event-exporter, nova, spqr, dask-gateway, spark-operator, lazydocker, rancher-machine, xcover, go-licenses, promxy, newrelic-nri-statsd, wire-go, container-object-storage-interface, cfssl,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: envoy-gateway, nfs-subdir-external-provisioner, terraform-provider-azurerm, kubernetes-event-exporter, nova, external-secrets-operator, tetragon, dask-gateway, actions-runner-controller, dapr, kubernetes-csi-external-provisioner, lazydocker, litestream,...
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: boring-registry, ollama, nfs-subdir-external-provisioner, terraform-provider-azurerm, kubernetes-event-exporter, actions-runner-controller, gitsign, pulumi, spark-operator, terragrunt, crossplane-provider-aws, src, go-licenses, crossplane-provider-family-azure,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, spqr, dask-gateway, kubernetes-csi-external-provisioner, spark-operator, litestream, rabbitmq-default-user-credential-updater, libnvidia-container, crossplane-provider-aws, src, go-licenses, k9s,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, kubernetes-event-exporter, nova, spqr, dask-gateway, spark-operator, lazydocker, rancher-machine, xcover, go-licenses, promxy, newrelic-nri-statsd, wire-go, container-object-storage-interface, cfssl,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: boring-registry, kubebuilder, nfs-subdir-external-provisioner, kubernetes-event-exporter, nova, spqr, dask-gateway, spark-operator, lazydocker, rancher-machine, xcover, go-licenses, promxy, newrelic-nri-statsd, wire-go, container-object-storage-interface, cfssl,...