CVE Program partner
chainguard
Chainguard, Inc.
CVEs, 365 days33 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Chainguard, Inc. |
| Role | CNA |
| Type | Vendor, Hosted Service, Open Source, Researcher |
| Reports to | icscert → CISA |
| Scope | Chainguard Containers/Libraries/VMs, tooling, and vulnerabilities introduced by our packaging or patching of Wolfi packages (upstream flaws in packaged software excluded).<br/><br/>Additionally, vulnerabilities in open source projects identified through the Athena coalition, where upstream has remediated without an assigned identifier, or where no maintainer is active, and no more specific CNA covers the project. |
| Advisories | https://images.chainguard.dev/security |
Latest CVEs · RSS
- CVE-2026-105768 2026-10-05 · CVSS 6.3apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.
- CVE-2026-105767 2026-10-05 · CVSS 2.1Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit
- CVE-2026-105766 2026-10-05 · CVSS 2.3Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7