CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: trivy, commercial-chainloop-cli, cerbos, grype, terragrunt-fips, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips,...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

GO-2026-4580 kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko...