Browse CVEs

MEDIUM 6.1 CVE-2026-29050 melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can i… Melange 0.43.4+ Fix from $1,6002026-04-24 HIGH 8.2 CVE-2026-28406 kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to versi… Kaniko 1.25.10+ Fix from $1,9502026-02-27 MEDIUM 5.3 CVE-2026-28407 malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent… Malcontent 1.21.0+ Fix from $1,6002026-02-27 HIGH 7.8 CVE-2026-25143 melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to… Melange 0.40.5+ Fix from $1,9502026-02-04 MEDIUM 5.5 CVE-2026-25145 melange allows users to build apk packages using declarative pipelines. From version 0.14.0 to before 0.40.3, an attacker who can influence a melange… Melange 0.40.5+ Fix from $1,6002026-02-04 HIGH 8.8 CVE-2026-24844 melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input … Melange after 0.40.5 Fix from $1,9502026-02-04 HIGH 8.4 CVE-2026-24843 melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence the tar str… Melange 0.40.5+ Fix from $1,9502026-02-04 HIGH 7.5 CVE-2026-25140 apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, an attacker who controls or… Apko 1.1.1+ Fix from $1,9502026-02-04 HIGH 7.5 CVE-2026-25121 apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerabil… Apko 1.1.1+ Fix from $1,9502026-02-04 MEDIUM 5.5 CVE-2026-25122 apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the … Apko 1.1.0+ Fix from $1,6002026-02-04 MEDIUM 6.5 CVE-2026-24845 malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20… Malcontent 1.20.3+ Fix from $1,6002026-01-29 MEDIUM 5.0 CVE-2026-24846 malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.… Malcontent 1.20.3+ Fix from $1,6002026-01-29