Skip to content
OpenAdvisories

Package · Wolfi

kaniko-warmer

50 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-61712

    BuildKit: Possible runtime DoS via unbounded group parsing

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a u…

    moby BuildKit zot kubescape Azure Linux Wolfi Go
  • Low 2.5
    CVE-2026-27139

    FileInfo can escape from a Root in os

    On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by …

    Go standard library os langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Low 3.1
    CVE-2024-51744

    Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

    golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and …

    golang-jwt jwt katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go