Chainguard kayıtları
chainguard üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6
- CWE-400 Uncontrolled Resource Consumption3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-23 Relative Path Traversal1
- CWE-522 Insufficiently Protected Credentials1
- CWE-703 Improper Check or Handling of Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-24844İstismar yok | melange pipeline working-directory could allow command injectionchainguard · melange · CWE-78 | Yüksek8,8 | — | %0,2 | 4 Şub 2026 |
33İzleyin | CVE-2026-24843İstismar yok | melange QEMU runner could write files outside workspace directorychainguard · melange · CWE-22 | Yüksek8,4 | — | %0,1 | 4 Şub 2026 |
32İzleyin | CVE-2026-28406İstismar yok | kaniko has tar archive path traversal in build context extraction allows writing files outside destination directorychainguard · kaniko · CWE-22 | Yüksek8,2 | — | %0,6 | 27 Şub 2026 |
31İzleyin | CVE-2026-25143İstismar yok | melange affected by potential host command execution via license-check YAML mode patch pipelinechainguard · melange · CWE-78 | Yüksek7,8 | — | %0,2 | 4 Şub 2026 |
30İzleyin | CVE-2026-25121İstismar yok | apko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside basechainguard · apko · CWE-23 | Yüksek7,5 | — | %0,4 | 4 Şub 2026 |
30İzleyin | CVE-2026-25140İstismar yok | apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streamschainguard · apko · CWE-400 | Yüksek7,5 | — | %0,4 | 4 Şub 2026 |
27İzleyin | CVE-2026-28407İstismar yok | malcontent's nested archive extraction failure can drop content from scan inputschainguard · malcontent · CWE-703 | Orta6,9 | — | %0,4 | 27 Şub 2026 |
26İzleyin | CVE-2026-24845İstismar yok | malcontent's OCI image scanning could expose registry credentialschainguard · malcontent · CWE-522 | Orta6,5 | — | %0,3 | 29 Oca 2026 |
24İzleyin | CVE-2026-29050İstismar yok | melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].useschainguard · melange · CWE-22 | Orta6,1 | — | %0,1 | 24 Nis 2026 |
22İzleyin | CVE-2026-25145İstismar yok | melange has a path traversal in license-path which allows reading files outside workspacechainguard · melange · CWE-22 | Orta5,5 | — | %0,1 | 4 Şub 2026 |
22İzleyin | CVE-2026-25122İstismar yok | apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streamschainguard · apko · CWE-400 | Orta5,5 | — | %0,1 | 4 Şub 2026 |
20İzleyin | CVE-2026-24846İstismar yok | malcontent's archive extraction could write outside extraction directorychainguard · malcontent · CWE-22 | Orta5,0 | — | %0,1 | 29 Oca 2026 |
17İzleyin | CVE-2026-29049İstismar yok | melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CIchainguard · melange · CWE-400 | Orta4,3 | — | %0,2 | 6 Mar 2026 |
13İzleyin | CVE-2026-29051İstismar yok | melange has Path Traversal via .PKGINFO in --persist-lint-resultschainguard · melange · CWE-22 | Düşük3,3 | — | %0,1 | 24 Nis 2026 |
- CVE-2026-2484435İzleyin
melange pipeline working-directory could allow command injection
YüksekCVSS 8,8İstismar yokEPSS %0chainguard · melange4 Şub 2026
- CVE-2026-2484333İzleyin
melange QEMU runner could write files outside workspace directory
YüksekCVSS 8,4İstismar yokEPSS %0chainguard · melange4 Şub 2026
- CVE-2026-2840632İzleyin
kaniko has tar archive path traversal in build context extraction allows writing files outside destination directory
YüksekCVSS 8,2İstismar yokEPSS %0chainguard · kaniko27 Şub 2026
- CVE-2026-2514331İzleyin
melange affected by potential host command execution via license-check YAML mode patch pipeline
YüksekCVSS 7,8İstismar yokEPSS %0chainguard · melange4 Şub 2026
- CVE-2026-2512130İzleyin
apko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base
YüksekCVSS 7,5İstismar yokEPSS %0chainguard · apko4 Şub 2026
- CVE-2026-2514030İzleyin
apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams
YüksekCVSS 7,5İstismar yokEPSS %0chainguard · apko4 Şub 2026
- CVE-2026-2840727İzleyin
malcontent's nested archive extraction failure can drop content from scan inputs
OrtaCVSS 6,9İstismar yokEPSS %0chainguard · malcontent27 Şub 2026
- CVE-2026-2484526İzleyin
malcontent's OCI image scanning could expose registry credentials
OrtaCVSS 6,5İstismar yokEPSS %0chainguard · malcontent29 Oca 2026
- CVE-2026-2905024İzleyin
melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses
OrtaCVSS 6,1İstismar yokEPSS %0chainguard · melange24 Nis 2026
- CVE-2026-2514522İzleyin
melange has a path traversal in license-path which allows reading files outside workspace
OrtaCVSS 5,5İstismar yokEPSS %0chainguard · melange4 Şub 2026
- CVE-2026-2512222İzleyin
apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams
OrtaCVSS 5,5İstismar yokEPSS %0chainguard · apko4 Şub 2026
- CVE-2026-2484620İzleyin
malcontent's archive extraction could write outside extraction directory
OrtaCVSS 5,0İstismar yokEPSS %0chainguard · malcontent29 Oca 2026
- CVE-2026-2904917İzleyin
melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI
OrtaCVSS 4,3İstismar yokEPSS %0chainguard · melange6 Mar 2026
- CVE-2026-2905113İzleyin
melange has Path Traversal via .PKGINFO in --persist-lint-results
DüşükCVSS 3,3İstismar yokEPSS %0chainguard · melange24 Nis 2026