chainguard-dev has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.3 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
chainguard-dev vulnerabilities
CVEs affecting chainguard-dev, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-105768Medium· 6.3apko allows users to build and publish OCI container images built from apk packages
apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group…
▾ Sunlitchainguard-dev · chainguard.dev/apkoEPSS 0.30%via NVD
CVE-2026-54174High· 8.3melange allows users to build apk packages using declarative pipelines
melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash (`.PKGINFO` etc.) against the signed `APKINDEX`, but…
▾ Twilightchainguard-dev · melangeEPSS 0.15%via NVD