Vulnerability GO-2026-4580

Advisory details are being prepared in the background.

Unknown

8 months ago

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

v1.25.4 - v1.25.9

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown

9 hours ago

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts in github.com/chainguard-dev/kaniko

v0.1.0 - v1.25.19 GO-2026-6902

Critical

15 hours ago

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

v0.1.0 - v1.25.19 GHSA-5q7h-w9jf-cx97

High Risk

8 months ago

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories

v1.25.4 - v1.25.9 GHSA-6rxq-q92g-4rmf

View all vulnerabilities for these packages

Impacted packages

github.com/chainguard-dev/kaniko

Timeline

Published

8 months ago

Last Modified

7 months ago