Skip to content
OpenAdvisories

Vendor

chainguard-forks

1 known vulnerabilities.

Products

kaniko 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-28406

    kaniko has tar archive path traversal in build context extraction allows writing files outside destination directory

    kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing t…

    chainguard-forks kaniko github.com/chainguard-dev/kaniko Go