8.8High
Chainguard MinIO
MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.
chainguard vulnerabilities (CVE)
CVE records published for chainguard, newest first. Follow to get an email when a new one appears.
9.3Critical
kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
chainguard kaniko
kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which…
3.3Low
Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Chainguard Chainguard Academy (edu)
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 al…
3.1Low
Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP
Chainguard Chainguard Academy (edu)
Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network…
4.4Medium
melange has Path Traversal via .PKGINFO in --persist-lint-results
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, `melange lint --persist-lint-results` (opt-in flag, also usable via `melange build --persist-lint-results`) constructs output file …
6.1Medium
melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can influence a melange configuration file — for example through pull-request-driven CI or build-as-a-service scena…
4.3Medium
melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. In version 0.40.5 and prior, melange update-cache downloads URIs from build configs via io.Copy without any size limit or HTTP client timeout (pkg/renovate/cache/cache.go). An attacker-co…
6.9Medium
malcontent's nested archive extraction failure can drop content from scan inputs
chainguard-dev malcontent
malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A bette…
8.2High
kaniko has tar archive path traversal in build context extraction allows writing files outside destination directory
chainguard-forks kaniko; Red Hat OpenShift Serverless
kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing t…
5.5Medium
melange has a path traversal in license-path which allows reading files outside workspace
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. From version 0.14.0 to before 0.40.3, an attacker who can influence a melange configuration file (e.g., through pull request-driven CI or build-as-a-service scenarios) could read arbitrar…
7.8High
melange affected by potential host command execution via license-check YAML mode patch pipeline
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to the patch pipeline could execute arbitrary shell commands on the build host. The patch pipeline in pkg/build/…
7.8High
melange pipeline working-directory could allow command injection
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input values, but not modify pipeline definitions, could execute arbitrary shell commands if the pipeline uses ${{va…
8.2High
melange QEMU runner could write files outside workspace directory
chainguard-dev melange
melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence the tar stream from a QEMU guest VM could write files outside the intended workspace directory on the host. The retrieveW…
7.5High
apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams
chainguard-dev apko
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, an attacker who controls or compromises an APK repository used by apko could cause resource exhaustion on the build host. The ExpandApk f…
7.5High
apko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base
chainguard-dev apko
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious APK package …
5.5Medium
apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams
chainguard-dev apko
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the first gzip stream of an APK archive via io.Copy(io.Discard, gzi) without explicit bounds. With an attacker-con…
5.5Medium
malcontent's archive extraction could write outside extraction directory
chainguard-dev malcontent
malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.3, malcontent could be made to create symlinks outside the intended extraction directory when scanning a speci…
6.5Medium
malcontent's OCI image scanning could expose registry credentials
chainguard-dev malcontent
malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image…