Vulnetix
Try Vulnetix Request Demo
Google Security Advisories · January 2026 — Google Security Advisories
4227 advisories 4144 CVEs 75 EXPLOITED

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2026-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 75 are already weaponised in the wild.

Back to archive Open Console

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

How Vulnetix ranks risk Get a free API key

Advisories

CGA-2vjc-57g7-cm6q

GoogleKnown malware2026-01-29

CGA-2vjc-57g7-cm6q

Affected products

ProductStatusVendorPackageEcosystem
druid affected Chainguard druid —
druid affected Wolfi druid —
druid-compat affected Chainguard druid-compat —
druid-compat affected Wolfi druid-compat —
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-pcp8-xw84-x72j

Open SourceExploitedCISA KEV listed2026-01-29

CGA-pcp8-xw84-x72j

Affected products

ProductStatusVendorPackageEcosystem
aactl affected Wolfi aactl —
aactl affected Chainguard aactl —
amass affected Wolfi amass —
amass affected Chainguard amass —
argo-cd-2.7 affected Wolfi argo-cd-2.7 —
argo-cd-2.7 affected Chainguard argo-cd-2.7 —
atlantis affected Chainguard atlantis —
atlantis affected Wolfi atlantis —
atlantis-fips affected Chainguard atlantis-fips —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
aws-load-balancer-controller-2.4.5 affected Chainguard aws-load-balancer-controller-2.4.5 —
bank-vaults-fips affected Chainguard bank-vaults-fips —
bank-vaults-template-fips affected Chainguard bank-vaults-template-fips —
bom affected Wolfi bom —
bom affected Chainguard bom —
buildctl affected Chainguard buildctl —
buildctl affected Wolfi buildctl —
buildkitd affected Chainguard buildkitd —
buildkitd affected Wolfi buildkitd —
calico affected Chainguard calico —
calico affected Wolfi calico —
calico-fips affected Chainguard calico-fips —
certificate-transparency affected Chainguard certificate-transparency —
certificate-transparency affected Wolfi certificate-transparency —
cert-manager-1.13 affected Wolfi cert-manager-1.13 —
cert-manager-1.13 affected Chainguard cert-manager-1.13 —
cilium-envoy affected Chainguard cilium-envoy —
cilium-envoy affected Wolfi cilium-envoy —
cluster-autoscaler-1.25 affected Wolfi cluster-autoscaler-1.25 —
cluster-autoscaler-1.25 affected Chainguard cluster-autoscaler-1.25 —
configmap-reload-fips affected Chainguard configmap-reload-fips —
configmap-reload-fips-0.11 affected Chainguard configmap-reload-fips-0.11 —
conftest affected Wolfi conftest —
conftest affected Chainguard conftest —
coredns affected Wolfi coredns —
coredns affected Chainguard coredns —
cortex affected Wolfi cortex —
cortex affected Chainguard cortex —
cosign affected Wolfi cosign —
cosign affected Chainguard cosign —
cue affected Wolfi cue —
cue affected Chainguard cue —
dex affected Wolfi dex —
dex affected Chainguard dex —
dgraph affected Chainguard dgraph —
dgraph affected Wolfi dgraph —
dotnet-6 affected Chainguard dotnet-6 —
dotnet-6 affected Wolfi dotnet-6 —
dotnet-7 affected Wolfi dotnet-7 —
dotnet-7 affected Chainguard dotnet-7 —
dynamic-localpv-provisioner affected Wolfi dynamic-localpv-provisioner —
dynamic-localpv-provisioner affected Chainguard dynamic-localpv-provisioner —
dynamic-localpv-provisioner-fips affected Chainguard dynamic-localpv-provisioner-fips —
envoy-ratelimit affected Chainguard envoy-ratelimit —
envoy-ratelimit affected Wolfi envoy-ratelimit —
external-dns affected Wolfi external-dns —
external-dns affected Chainguard external-dns —
external-dns-fips affected Chainguard external-dns-fips —
external-secrets-0.7 affected Chainguard external-secrets-0.7 —
falcoctl-fips affected Chainguard falcoctl-fips —
falcoctl-fips-0.4 affected Chainguard falcoctl-fips-0.4 —
flux-0 affected Chainguard flux-0 —
flux-0.37 affected Chainguard flux-0.37 —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller-0 affected Chainguard flux-helm-controller-0 —
flux-helm-controller-0.37 affected Chainguard flux-helm-controller-0.37 —
flux-image-reflector-controller-0 affected Chainguard flux-image-reflector-controller-0 —
flux-kustomize-controller affected Wolfi flux-kustomize-controller —
flux-kustomize-controller affected Chainguard flux-kustomize-controller —
flux-kustomize-controller-0 affected Chainguard flux-kustomize-controller-0 —
flux-kustomize-controller-0.37 affected Chainguard flux-kustomize-controller-0.37 —
flux-notification-controller affected Wolfi flux-notification-controller —
flux-notification-controller affected Chainguard flux-notification-controller —
flux-notification-controller-0 affected Chainguard flux-notification-controller-0 —
flux-notification-controller-0.37 affected Chainguard flux-notification-controller-0.37 —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller-0 affected Chainguard flux-source-controller-0 —
flux-source-controller-0.37 affected Chainguard flux-source-controller-0.37 —
frp affected Chainguard frp —
frp affected Wolfi frp —
fuse-overlayfs-snapshotter affected Chainguard fuse-overlayfs-snapshotter —
fuse-overlayfs-snapshotter affected Wolfi fuse-overlayfs-snapshotter —
gatekeeper-3.12 affected Wolfi gatekeeper-3.12 —
gatekeeper-3.12 affected Chainguard gatekeeper-3.12 —
gatekeeper-3.14 affected Chainguard gatekeeper-3.14 —
gatekeeper-3.14 affected Wolfi gatekeeper-3.14 —
gatekeeper-fips-3.14 affected Chainguard gatekeeper-fips-3.14 —
gitlab-pages affected Chainguard gitlab-pages —
gitlab-pages affected Wolfi gitlab-pages —
gitlab-runner affected Wolfi gitlab-runner —
gitlab-runner affected Chainguard gitlab-runner —
git-lfs affected Wolfi git-lfs —
git-lfs affected Chainguard git-lfs —
gitness affected Chainguard gitness —
gitness affected Wolfi gitness —
gke-gcloud-auth-plugin affected Chainguard gke-gcloud-auth-plugin —
gke-gcloud-auth-plugin affected Wolfi gke-gcloud-auth-plugin —
gobuster affected Wolfi gobuster —
gobuster affected Chainguard gobuster —
gomplate affected Chainguard gomplate —
gomplate affected Wolfi gomplate —
grafana-7 affected Chainguard grafana-7 —
grafana-9.3 affected Chainguard grafana-9.3 —
grpcurl affected Wolfi grpcurl —
grpcurl affected Chainguard grpcurl —
grype affected Wolfi grype —
grype affected Chainguard grype —
haproxy-ingress affected Chainguard haproxy-ingress —
haproxy-ingress affected Wolfi haproxy-ingress —
helm affected Wolfi helm —
helm affected Chainguard helm —
helm-3 affected Wolfi helm-3 —
helm-3 affected Chainguard helm-3 —
helm-4 affected Wolfi helm-4 —
helm-4 affected Chainguard helm-4 —
hey affected Wolfi hey —
hey affected Chainguard hey —
hugo affected Wolfi hugo —
hugo affected Chainguard hugo —
influxd affected Wolfi influxd —
influxd affected Chainguard influxd —
ingress-nginx-controller affected Wolfi ingress-nginx-controller —
ingress-nginx-controller affected Chainguard ingress-nginx-controller —
ingress-nginx-controller-fips affected Chainguard ingress-nginx-controller-fips —
ip-masq-agent affected Chainguard ip-masq-agent —
ip-masq-agent affected Wolfi ip-masq-agent —
istio-envoy-1.18 affected Chainguard istio-envoy-1.18 —
istio-envoy-1.18 affected Wolfi istio-envoy-1.18 —
istio-envoy-1.19 affected Wolfi istio-envoy-1.19 —
istio-envoy-1.19 affected Chainguard istio-envoy-1.19 —
k3d-tools affected Wolfi k3d-tools —
k3d-tools affected Chainguard k3d-tools —
kaf affected Wolfi kaf —
kaf affected Chainguard kaf —
karpenter-0.23 affected Chainguard karpenter-0.23 —
keda affected Chainguard keda —
keda affected Wolfi keda —
keda-2.10 affected Wolfi keda-2.10 —
keda-2.10 affected Chainguard keda-2.10 —
keda-2.11 affected Wolfi keda-2.11 —
keda-2.11 affected Chainguard keda-2.11 —
kiam affected Chainguard kiam —
kind affected Chainguard kind —
kind affected Wolfi kind —
ko affected Wolfi ko —
ko affected Chainguard ko —
kots affected Wolfi kots —
kots affected Chainguard kots —
kpt affected Chainguard kpt —
kpt affected Wolfi kpt —
kubeflow-access-management-fips affected Chainguard kubeflow-access-management-fips —
kubeflow-access-management-fips-compat affected Chainguard kubeflow-access-management-fips-compat —
kubeflow-admission-webhook-fips affected Chainguard kubeflow-admission-webhook-fips —
kubeflow-admission-webhook-fips-compat affected Chainguard kubeflow-admission-webhook-fips-compat —
kubeflow-fips affected Chainguard kubeflow-fips —
kubeflow-katib affected Wolfi kubeflow-katib —
kubeflow-katib affected Chainguard kubeflow-katib —
kubeflow-notebook-controller affected Wolfi kubeflow-notebook-controller —
kubeflow-notebook-controller affected Chainguard kubeflow-notebook-controller —
kubeflow-notebook-controller-fips affected Chainguard kubeflow-notebook-controller-fips —
kubeflow-notebook-controller-fips-compat affected Chainguard kubeflow-notebook-controller-fips-compat —
kubeflow-profile-controller affected Chainguard kubeflow-profile-controller —
kubeflow-profile-controller affected Wolfi kubeflow-profile-controller —
kubeflow-profile-controller-fips affected Chainguard kubeflow-profile-controller-fips —
kubeflow-profile-controller-fips-compat affected Chainguard kubeflow-profile-controller-fips-compat —
kubeflow-pvcviewer-controller affected Wolfi kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller affected Chainguard kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller-fips affected Chainguard kubeflow-pvcviewer-controller-fips —
kubeflow-pvcviewer-controller-fips-compat affected Chainguard kubeflow-pvcviewer-controller-fips-compat —
kubeflow-tensorboard-controller affected Chainguard kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller affected Wolfi kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller-fips affected Chainguard kubeflow-tensorboard-controller-fips —
kubeflow-tensorboard-controller-fips-compat affected Chainguard kubeflow-tensorboard-controller-fips-compat —
kube-oidc-proxy affected Chainguard kube-oidc-proxy —
kubernetes-csi-external-snapshotter-6.0 affected Chainguard kubernetes-csi-external-snapshotter-6.0 —
kubernetes-csi-livenessprobe affected Wolfi kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe affected Chainguard kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe-fips affected Chainguard kubernetes-csi-livenessprobe-fips —
kubernetes-csi-livenessprobe-fips-2.10 affected Chainguard kubernetes-csi-livenessprobe-fips-2.10 —
kubernetes-csi-node-driver-registrar-2.9 affected Wolfi kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
kubescape affected Chainguard kubescape —
kubescape affected Wolfi kubescape —
kube-state-metrics-2.6 affected Chainguard kube-state-metrics-2.6 —
kubevela affected Chainguard kubevela —
kubevela affected Wolfi kubevela —
kubewatch affected Chainguard kubewatch —
kubewatch affected Wolfi kubewatch —
kyverno affected Wolfi kyverno —
kyverno affected Chainguard kyverno —
kyverno-policy-reporter-2.11 affected Chainguard kyverno-policy-reporter-2.11 —
kyverno-policy-reporter-kyverno-plugin-1.5 affected Chainguard kyverno-policy-reporter-kyverno-plugin-1.5 —
kyverno-policy-reporter-ui-1.7 affected Chainguard kyverno-policy-reporter-ui-1.7 —
mc affected Chainguard mc —
mc affected Wolfi mc —
memcached-exporter affected Wolfi memcached-exporter —
memcached-exporter affected Chainguard memcached-exporter —
metacontroller affected Chainguard metacontroller —
metacontroller affected Wolfi metacontroller —
metrics-server affected Chainguard metrics-server —
metrics-server affected Wolfi metrics-server —
metrics-server-fips affected Chainguard metrics-server-fips —
minio affected Chainguard minio —
minio affected Wolfi minio —
nats affected Wolfi nats —
nats affected Chainguard nats —
newrelic-infrastructure-agent affected Chainguard newrelic-infrastructure-agent —
newrelic-infrastructure-agent affected Wolfi newrelic-infrastructure-agent —
nfs-subdir-external-provisioner-fips affected Chainguard nfs-subdir-external-provisioner-fips —
nghttp2 affected Wolfi nghttp2 —
nghttp2 affected Chainguard nghttp2 —
nginx-mainline affected Chainguard nginx-mainline —
nginx-mainline affected Wolfi nginx-mainline —
nginx-stable affected Wolfi nginx-stable —
nginx-stable affected Chainguard nginx-stable —
nodejs-16 affected Chainguard nodejs-16 —
nodejs-16 affected Wolfi nodejs-16 —
nodejs-18 affected Wolfi nodejs-18 —
nodejs-18 affected Chainguard nodejs-18 —
nodejs-19 affected Wolfi nodejs-19 —
nodejs-19 affected Chainguard nodejs-19 —
nodejs-20 affected Wolfi nodejs-20 —
nodejs-20 affected Chainguard nodejs-20 —
node-problem-detector-0.8 affected Chainguard node-problem-detector-0.8 —
node-problem-detector-0.8 affected Wolfi node-problem-detector-0.8 —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
nri-prometheus affected Wolfi nri-prometheus —
nri-prometheus affected Chainguard nri-prometheus —
oauth2-proxy affected Chainguard oauth2-proxy —
oauth2-proxy affected Wolfi oauth2-proxy —
ollama affected Wolfi ollama —
ollama affected Chainguard ollama —
opentofu affected Wolfi opentofu —
opentofu affected Chainguard opentofu —
prometheus affected Chainguard prometheus —
prometheus affected Wolfi prometheus —
prometheus-2.38 affected Chainguard prometheus-2.38 —
prometheus-adapter affected Wolfi prometheus-adapter —
prometheus-adapter affected Chainguard prometheus-adapter —
prometheus-adapter-0.10 affected Chainguard prometheus-adapter-0.10 —
prometheus-adapter-fips-0.10 affected Chainguard prometheus-adapter-fips-0.10 —
prometheus-bind-exporter affected Chainguard prometheus-bind-exporter —
prometheus-bind-exporter affected Wolfi prometheus-bind-exporter —
prometheus-blackbox-exporter affected Wolfi prometheus-blackbox-exporter —
prometheus-blackbox-exporter affected Chainguard prometheus-blackbox-exporter —
prometheus-blackbox-exporter-iamguarded-compat affected Chainguard prometheus-blackbox-exporter-iamguarded-compat —
prometheus-elasticsearch-exporter affected Wolfi prometheus-elasticsearch-exporter —
prometheus-elasticsearch-exporter affected Chainguard prometheus-elasticsearch-exporter —
prometheus-postgres-exporter-0.10 affected Chainguard prometheus-postgres-exporter-0.10 —
prometheus-redis-exporter-fips-1.44 affected Chainguard prometheus-redis-exporter-fips-1.44 —
prometheus-stackdriver-exporter affected Wolfi prometheus-stackdriver-exporter —
prometheus-stackdriver-exporter affected Chainguard prometheus-stackdriver-exporter —
pulumi affected Wolfi pulumi —
pulumi affected Chainguard pulumi —
pulumi-kubernetes-operator affected Wolfi pulumi-kubernetes-operator —
pulumi-kubernetes-operator affected Chainguard pulumi-kubernetes-operator —
pulumi-language-dotnet affected Wolfi pulumi-language-dotnet —
pulumi-language-dotnet affected Chainguard pulumi-language-dotnet —
pulumi-language-java affected Chainguard pulumi-language-java —
pulumi-language-java affected Wolfi pulumi-language-java —
pulumi-language-yaml affected Wolfi pulumi-language-yaml —
pulumi-language-yaml affected Chainguard pulumi-language-yaml —
rqlite affected Chainguard rqlite —
rqlite affected Wolfi rqlite —
scorecard affected Wolfi scorecard —
scorecard affected Chainguard scorecard —
secrets-store-csi-driver affected Chainguard secrets-store-csi-driver —
secrets-store-csi-driver affected Wolfi secrets-store-csi-driver —
secrets-store-csi-driver-provider-gcp affected Chainguard secrets-store-csi-driver-provider-gcp —
secrets-store-csi-driver-provider-gcp affected Wolfi secrets-store-csi-driver-provider-gcp —
sigstore-scaffolding affected Wolfi sigstore-scaffolding —
sigstore-scaffolding affected Chainguard sigstore-scaffolding —
skaffold affected Chainguard skaffold —
skaffold affected Wolfi skaffold —
slsa-verifier affected Wolfi slsa-verifier —
slsa-verifier affected Chainguard slsa-verifier —
smarter-device-manager-fips affected Chainguard smarter-device-manager-fips —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
src affected Wolfi src —
src affected Chainguard src —
stakater-reloader affected Wolfi stakater-reloader —
stakater-reloader affected Chainguard stakater-reloader —
stakater-reloader-0.0.119 affected Chainguard stakater-reloader-0.0.119 —
stakater-reloader-0.0.128 affected Chainguard stakater-reloader-0.0.128 —
tctl affected Wolfi tctl —
tctl affected Chainguard tctl —
telegraf-1.26 affected Wolfi telegraf-1.26 —
telegraf-1.26 affected Chainguard telegraf-1.26 —
telegraf-1.27 affected Chainguard telegraf-1.27 —
telegraf-1.27 affected Wolfi telegraf-1.27 —
terraform affected Chainguard terraform —
terraform affected Wolfi terraform —
terraform-provider-aws affected Wolfi terraform-provider-aws —
terraform-provider-aws affected Chainguard terraform-provider-aws —
terraform-provider-azurerm affected Wolfi terraform-provider-azurerm —
terraform-provider-azurerm affected Chainguard terraform-provider-azurerm —
terraform-provider-sendgrid affected Wolfi terraform-provider-sendgrid —
terraform-provider-sendgrid affected Chainguard terraform-provider-sendgrid —
terraform-provider-sendgrid-fips affected Chainguard terraform-provider-sendgrid-fips —
thanos-0.31 affected Chainguard thanos-0.31 —
thanos-0.31 affected Wolfi thanos-0.31 —
thanos-0.32 affected Wolfi thanos-0.32 —
thanos-0.32 affected Chainguard thanos-0.32 —
timestamp-authority-fips affected Chainguard timestamp-authority-fips —
tomcat-10 affected Chainguard tomcat-10 —
tomcat-10 affected Wolfi tomcat-10 —
tomcat-8 affected Wolfi tomcat-8 —
tomcat-8 affected Chainguard tomcat-8 —
tomcat-9 affected Wolfi tomcat-9 —
tomcat-9 affected Chainguard tomcat-9 —
traefik affected Wolfi traefik —
traefik affected Chainguard traefik —
vault-csi-provider affected Wolfi vault-csi-provider —
vault-csi-provider affected Chainguard vault-csi-provider —
vault-k8s-fips affected Chainguard vault-k8s-fips —
volume-modifier-for-k8s-fips affected Chainguard volume-modifier-for-k8s-fips —
weaviate affected Chainguard weaviate —
weaviate affected Wolfi weaviate —
wireguard-go affected Chainguard wireguard-go —
wireguard-go affected Wolfi wireguard-go —
Upstream advisory

CGA-xj77-2fg4-p9xh

Open SourceExploitedCISA KEV listed2026-01-28

CGA-xj77-2fg4-p9xh

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-rwg6-qrw3-mq94

Open SourceExploitedCISA KEV listed2026-01-28

CGA-rwg6-qrw3-mq94

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-fips affected Chainguard kubernetes-csi-livenessprobe-fips —
Upstream advisory

CGA-rh6x-pqw3-m94h

Open SourceExploitedCISA KEV listed2026-01-28

CGA-rh6x-pqw3-m94h

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-fips-1.8 affected Chainguard kubernetes-csi-external-resizer-fips-1.8 —
Upstream advisory

CGA-r6pc-j2w2-hg9j

Open SourceExploitedCISA KEV listed2026-01-28

CGA-r6pc-j2w2-hg9j

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-fips-4.3 affected Chainguard kubernetes-csi-external-attacher-fips-4.3 —
Upstream advisory

CGA-qj39-h7mv-wvvr

Open SourceExploitedCISA KEV listed2026-01-28

CGA-qj39-h7mv-wvvr

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s-fips affected Chainguard vault-k8s-fips —
Upstream advisory

CGA-mh7x-f999-qfgr

Open SourceExploitedCISA KEV listed2026-01-28

CGA-mh7x-f999-qfgr

Affected products

ProductStatusVendorPackageEcosystem
istio-envoy-1.18 affected Chainguard istio-envoy-1.18 —
istio-envoy-1.18 affected Wolfi istio-envoy-1.18 —
Upstream advisory

CGA-jchg-g7m5-gx9j

Open SourceExploitedCISA KEV listed2026-01-28

CGA-jchg-g7m5-gx9j

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9 affected Wolfi kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.9-compat —
kubernetes-csi-node-driver-registrar-2.9-compat affected Wolfi kubernetes-csi-node-driver-registrar-2.9-compat —
Upstream advisory

CGA-j822-fhmp-r464

Open SourceExploitedCISA KEV listed2026-01-28

CGA-j822-fhmp-r464

Affected products

ProductStatusVendorPackageEcosystem
grpcurl affected Chainguard grpcurl —
grpcurl affected Wolfi grpcurl —
Upstream advisory

CGA-h2hr-q994-g57w

Open SourceExploitedCISA KEV listed2026-01-28

CGA-h2hr-q994-g57w

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.8 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8 —
kubernetes-csi-node-driver-registrar-fips-2.8-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8-compat —
Upstream advisory

CGA-cfpj-5fv4-gmqx

Open SourceExploitedCISA KEV listed2026-01-28

CGA-cfpj-5fv4-gmqx

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-4.3 affected Chainguard kubernetes-csi-external-attacher-4.3 —
kubernetes-csi-external-attacher-4.3 affected Wolfi kubernetes-csi-external-attacher-4.3 —
Upstream advisory

CGA-g76q-386m-vw9c

Open SourceExploitedCISA KEV listed2026-01-28

CGA-g76q-386m-vw9c

Affected products

ProductStatusVendorPackageEcosystem
istio-envoy-1.19 affected Chainguard istio-envoy-1.19 —
istio-envoy-1.19 affected Wolfi istio-envoy-1.19 —
Upstream advisory

CGA-8h6j-5683-hj2p

Open SourceExploitedCISA KEV listed2026-01-28

CGA-8h6j-5683-hj2p

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-2.10 affected Chainguard kubernetes-csi-livenessprobe-2.10 —
Upstream advisory

CGA-7942-4mrf-v638

Open SourceExploitedCISA KEV listed2026-01-28

CGA-7942-4mrf-v638

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe affected Chainguard kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe affected Wolfi kubernetes-csi-livenessprobe —
Upstream advisory

CGA-76j5-w627-hxq8

Open SourceExploitedCISA KEV listed2026-01-28

CGA-76j5-w627-hxq8

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-snapshotter-6.0 affected Chainguard kubernetes-csi-external-snapshotter-6.0 —
Upstream advisory

CGA-59pp-cfxf-c3rf

Open SourceExploitedCISA KEV listed2026-01-28

CGA-59pp-cfxf-c3rf

Affected products

ProductStatusVendorPackageEcosystem
volume-modifier-for-k8s-fips affected Chainguard volume-modifier-for-k8s-fips —
Upstream advisory

CGA-56q4-xqhh-mfwx

Open SourceExploitedCISA KEV listed2026-01-28

CGA-56q4-xqhh-mfwx

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-fips-2.10 affected Chainguard kubernetes-csi-livenessprobe-fips-2.10 —
Upstream advisory

CGA-2rv9-rcgf-5jmv

Open SourceExploitedCISA KEV listed2026-01-28

CGA-2rv9-rcgf-5jmv

Affected products

ProductStatusVendorPackageEcosystem
pulumi-kubernetes-operator affected Chainguard pulumi-kubernetes-operator —
pulumi-kubernetes-operator affected Wolfi pulumi-kubernetes-operator —
Upstream advisory

CVE-2026-21509

GoogleExploitedCISA KEV listedHIGH2026-01-13

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

CVEs:CVE-2026-21509

Affected products

ProductStatusVendorPackageEcosystem
365_apps affected microsoft — —
office affected microsoft — —
office_long_term_servicing_channel affected microsoft — —
Upstream advisory

CGA-9g59-8c5m-xgcx

Open SourceExploitedCISA KEV listed2026-01-29

CGA-9g59-8c5m-xgcx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-9w46-554g-qf74

Open SourceExploitedCISA KEV listed2026-01-29

CGA-9w46-554g-qf74

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-3r6q-w9j6-xm3p

Open SourceExploitedCISA KEV listed2026-01-28

CGA-3r6q-w9j6-xm3p

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-jmjc-ph87-4994

Open SourceExploitedCISA KEV listed2026-01-29

CGA-jmjc-ph87-4994

Affected products

ProductStatusVendorPackageEcosystem
buildctl affected Wolfi buildctl —
buildctl affected Chainguard buildctl —
buildkitd affected Chainguard buildkitd —
buildkitd affected Wolfi buildkitd —
cadvisor affected Wolfi cadvisor —
cadvisor affected Chainguard cadvisor —
cadvisor-compat affected Wolfi cadvisor-compat —
cadvisor-compat affected Chainguard cadvisor-compat —
ctop affected Chainguard ctop —
ctop affected Wolfi ctop —
datadog-agent affected Wolfi datadog-agent —
datadog-agent affected Chainguard datadog-agent —
datadog-agent-core-integrations affected Wolfi datadog-agent-core-integrations —
datadog-agent-core-integrations affected Chainguard datadog-agent-core-integrations —
datadog-agent-core-integrations-fips affected Chainguard datadog-agent-core-integrations-fips —
datadog-agent-fakeintake affected Chainguard datadog-agent-fakeintake —
datadog-agent-fakeintake affected Wolfi datadog-agent-fakeintake —
datadog-agent-fakeintake-fips affected Chainguard datadog-agent-fakeintake-fips —
datadog-agent-fips affected Chainguard datadog-agent-fips —
datadog-agent-jmx affected Chainguard datadog-agent-jmx —
datadog-agent-jmx affected Wolfi datadog-agent-jmx —
datadog-agent-jmx-fips affected Chainguard datadog-agent-jmx-fips —
datadog-agent-oci-compat affected Wolfi datadog-agent-oci-compat —
datadog-agent-oci-compat affected Chainguard datadog-agent-oci-compat —
datadog-agent-oci-compat-fips affected Chainguard datadog-agent-oci-compat-fips —
datadog-agent-s6-overlay affected Chainguard datadog-agent-s6-overlay —
datadog-agent-s6-overlay affected Wolfi datadog-agent-s6-overlay —
datadog-agent-s6-overlay-fips affected Chainguard datadog-agent-s6-overlay-fips —
datadog-cluster-agent affected Wolfi datadog-cluster-agent —
datadog-cluster-agent affected Chainguard datadog-cluster-agent —
datadog-cluster-agent-fips affected Chainguard datadog-cluster-agent-fips —
datadog-cluster-agent-oci-compat affected Wolfi datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat affected Chainguard datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat-fips affected Chainguard datadog-cluster-agent-oci-compat-fips —
docker affected Wolfi docker —
docker affected Chainguard docker —
docker-config-mirror-gcr affected Wolfi docker-config-mirror-gcr —
docker-config-mirror-gcr affected Chainguard docker-config-mirror-gcr —
dockerd affected Chainguard dockerd —
dockerd affected Wolfi dockerd —
docker-dind affected Chainguard docker-dind —
docker-dind affected Wolfi docker-dind —
docker-dind-compat affected Wolfi docker-dind-compat —
docker-dind-compat affected Chainguard docker-dind-compat —
dockerd-oci-entrypoint affected Wolfi dockerd-oci-entrypoint —
dockerd-oci-entrypoint affected Chainguard dockerd-oci-entrypoint —
dockerd-service affected Chainguard dockerd-service —
dockerd-service affected Wolfi dockerd-service —
docker-init affected Chainguard docker-init —
docker-init affected Wolfi docker-init —
docker-modprobe-compat affected Chainguard docker-modprobe-compat —
docker-modprobe-compat affected Wolfi docker-modprobe-compat —
docker-oci-entrypoint affected Chainguard docker-oci-entrypoint —
docker-oci-entrypoint affected Wolfi docker-oci-entrypoint —
docker-rootless affected Wolfi docker-rootless —
docker-rootless affected Chainguard docker-rootless —
dogstatsd affected Chainguard dogstatsd —
dogstatsd affected Wolfi dogstatsd —
grype affected Wolfi grype —
grype affected Chainguard grype —
ingress-nginx-controller affected Wolfi ingress-nginx-controller —
ingress-nginx-controller affected Chainguard ingress-nginx-controller —
ingress-nginx-controller-compat affected Wolfi ingress-nginx-controller-compat —
ingress-nginx-controller-compat affected Chainguard ingress-nginx-controller-compat —
ingress-nginx-controller-fips affected Chainguard ingress-nginx-controller-fips —
ingress-nginx-controller-fips-compat affected Chainguard ingress-nginx-controller-fips-compat —
k3d affected Wolfi k3d —
k3d affected Chainguard k3d —
k3d-proxy affected Wolfi k3d-proxy —
k3d-proxy affected Chainguard k3d-proxy —
k3d-tools affected Wolfi k3d-tools —
k3d-tools affected Chainguard k3d-tools —
k3s affected Chainguard k3s —
k3s affected Wolfi k3s —
k3s-embedded affected Chainguard k3s-embedded —
k3s-embedded affected Wolfi k3s-embedded —
k3s-images affected Wolfi k3s-images —
k3s-images affected Chainguard k3s-images —
k3s-multicall affected Wolfi k3s-multicall —
k3s-multicall affected Chainguard k3s-multicall —
k3s-static affected Chainguard k3s-static —
k3s-static affected Wolfi k3s-static —
k9s affected Wolfi k9s —
k9s affected Chainguard k9s —
kaniko affected Wolfi kaniko —
kaniko affected Chainguard kaniko —
kaniko-compat affected Wolfi kaniko-compat —
kaniko-compat affected Chainguard kaniko-compat —
kaniko-warmer affected Chainguard kaniko-warmer —
kaniko-warmer affected Wolfi kaniko-warmer —
kaniko-warmer-compat affected Chainguard kaniko-warmer-compat —
kaniko-warmer-compat affected Wolfi kaniko-warmer-compat —
kots affected Wolfi kots —
kots affected Chainguard kots —
kots-compat affected Wolfi kots-compat —
kots-compat affected Chainguard kots-compat —
kots-symlink-compat affected Wolfi kots-symlink-compat —
kots-symlink-compat affected Chainguard kots-symlink-compat —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-fips-1.27 affected Chainguard kubeadm-fips-1.27 —
kubeadm-fips-1.27-default affected Chainguard kubeadm-fips-1.27-default —
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-apiserver-fips-1.27 affected Chainguard kube-apiserver-fips-1.27 —
kube-apiserver-fips-1.27-default affected Chainguard kube-apiserver-fips-1.27-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kube-controller-manager-fips-1.27 affected Chainguard kube-controller-manager-fips-1.27 —
kube-controller-manager-fips-1.27-default affected Chainguard kube-controller-manager-fips-1.27-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-1.29-iamguarded-compat affected Chainguard kubectl-1.29-iamguarded-compat —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubectl-bash-completion-fips-1.27 affected Chainguard kubectl-bash-completion-fips-1.27 —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.27 affected Chainguard kubectl-fips-1.27 —
kubectl-fips-1.27-default affected Chainguard kubectl-fips-1.27-default —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-fips-1.27 affected Chainguard kubelet-fips-1.27 —
kubelet-fips-1.27-default affected Chainguard kubelet-fips-1.27-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kube-proxy-fips-1.27 affected Chainguard kube-proxy-fips-1.27 —
kube-proxy-fips-1.27-default affected Chainguard kube-proxy-fips-1.27-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
kubernetes-fips-1.27-default affected Chainguard kubernetes-fips-1.27-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kubernetes-pause-fips-3.9 affected Chainguard kubernetes-pause-fips-3.9 —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
kube-scheduler-fips-1.27 affected Chainguard kube-scheduler-fips-1.27 —
kube-scheduler-fips-1.27-default affected Chainguard kube-scheduler-fips-1.27-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
kube-webhook-certgen affected Wolfi kube-webhook-certgen —
kube-webhook-certgen affected Chainguard kube-webhook-certgen —
kube-webhook-certgen-fips affected Chainguard kube-webhook-certgen-fips —
nerdctl affected Chainguard nerdctl —
nerdctl affected Wolfi nerdctl —
newrelic-infrastructure-agent affected Wolfi newrelic-infrastructure-agent —
newrelic-infrastructure-agent affected Chainguard newrelic-infrastructure-agent —
newrelic-infrastructure-agent-1.43 affected Chainguard newrelic-infrastructure-agent-1.43 —
podman affected Wolfi podman —
podman affected Chainguard podman —
podman-doc affected Wolfi podman-doc —
podman-doc affected Chainguard podman-doc —
runc affected Chainguard runc —
runc affected Wolfi runc —
runc-doc affected Wolfi runc-doc —
runc-doc affected Chainguard runc-doc —
skaffold affected Wolfi skaffold —
skaffold affected Chainguard skaffold —
skopeo affected Chainguard skopeo —
skopeo affected Wolfi skopeo —
syft affected Wolfi syft —
syft affected Chainguard syft —
telegraf-1.26 affected Wolfi telegraf-1.26 —
telegraf-1.26 affected Chainguard telegraf-1.26 —
telegraf-1.27 affected Wolfi telegraf-1.27 —
telegraf-1.27 affected Chainguard telegraf-1.27 —
telegraf-1.28 affected Chainguard telegraf-1.28 —
telegraf-1.28 affected Wolfi telegraf-1.28 —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
wolfictl affected Chainguard wolfictl —
wolfictl affected Wolfi wolfictl —
zarf affected Wolfi zarf —
zarf affected Chainguard zarf —
zot affected Chainguard zot —
zot affected Wolfi zot —
Upstream advisory

CGA-wqx8-c66f-gj4f

Open SourceExploitedCISA KEV listed2026-01-28

CGA-wqx8-c66f-gj4f

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
Upstream advisory

CGA-mcq5-95p2-hj5c

Open SourceExploitedCISA KEV listed2026-01-28

CGA-mcq5-95p2-hj5c

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
Upstream advisory

CGA-9hgj-3v5x-jjcg

Open SourceExploitedCISA KEV listed2026-01-28

CGA-9hgj-3v5x-jjcg

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
Upstream advisory

CGA-cxh5-6369-99jv

Open SourceExploitedCISA KEV listed2026-01-28

CGA-cxh5-6369-99jv

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-65m7-ccr8-4g9j

Open SourceExploitedCISA KEV listed2026-01-28

CGA-65m7-ccr8-4g9j

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
Upstream advisory

CGA-hpx5-5m6g-258x

Open SourceExploitedCISA KEV listed2026-01-29

CGA-hpx5-5m6g-258x

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-82xm-86hp-37qx

Open SourceExploitedCISA KEV listed2026-01-28

CGA-82xm-86hp-37qx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-xw69-mvp8-h325

Open SourceExploitedCISA KEV listed2026-01-29

CGA-xw69-mvp8-h325

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-p5xr-7c38-2rq7

Open SourceExploitedCISA KEV listed2026-01-28

CGA-p5xr-7c38-2rq7

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-m534-xj5f-7pp4

Open SourceExploitedCISA KEV listed2026-01-29

CGA-m534-xj5f-7pp4

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-x22m-wj28-4q4m

Open SourceExploitedCISA KEV listed2026-01-29

CGA-x22m-wj28-4q4m

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-whqv-p93j-hw3p

Open SourceExploitedCISA KEV listed2026-01-28

CGA-whqv-p93j-hw3p

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-95gp-gc8c-cvqq

Open SourceExploitedCISA KEV listed2026-01-29

CGA-95gp-gc8c-cvqq

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-5pvh-pvxp-9fpv

Open SourceExploitedCISA KEV listed2026-01-29

CGA-5pvh-pvxp-9fpv

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-9fv9-cfx8-ffxv

Open SourceExploitedCISA KEV listed2026-01-28

CGA-9fv9-cfx8-ffxv

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CVE-2026-20805

GoogleExploitedCISA KEV listedMEDIUM2026-01-13

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

CVEs:CVE-2026-20805

Affected products

ProductStatusVendorPackageEcosystem
windows_10_1607 affected microsoft — —
windows_10_1809 affected microsoft — —
windows_10_21h2 affected microsoft — —
windows_10_22h2 affected microsoft — —
windows_11_23h2 affected microsoft — —
windows_11_24h2 affected microsoft — —
windows_11_25h2 affected microsoft — —
windows_server_2012 affected microsoft — —
windows_server_2016 affected microsoft — —
windows_server_2019 affected microsoft — —
windows_server_2022 affected microsoft — —
windows_server_2022_23h2 affected microsoft — —
windows_server_2025 affected microsoft — —
Upstream advisory

CGA-xfw2-pp3q-2vr9

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-xfw2-pp3q-2vr9

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
Upstream advisory

CGA-w47w-88r5-p4gf

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-w47w-88r5-p4gf

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-event-exporter affected Chainguard kubernetes-event-exporter —
kubernetes-event-exporter affected Wolfi kubernetes-event-exporter —
kubernetes-event-exporter-bitnami-compat affected Chainguard kubernetes-event-exporter-bitnami-compat —
kubernetes-event-exporter-bitnami-compat affected Wolfi kubernetes-event-exporter-bitnami-compat —
Upstream advisory

CGA-vxhh-24cf-v4pg

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-vxhh-24cf-v4pg

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-vgfm-jfff-35vf

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-vgfm-jfff-35vf

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
Upstream advisory

CGA-qxcp-8jmf-cc9w

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-qxcp-8jmf-cc9w

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
Upstream advisory

CGA-qwfc-cqw5-v6qr

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-qwfc-cqw5-v6qr

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
Upstream advisory

CGA-q7f3-wcq6-fcq3

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-q7f3-wcq6-fcq3

Affected products

ProductStatusVendorPackageEcosystem
wavefront-collector-for-kubernetes-1.12 affected Chainguard wavefront-collector-for-kubernetes-1.12 —
Upstream advisory

CGA-q6qg-q8q4-44x7

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-q6qg-q8q4-44x7

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
Upstream advisory

CGA-pg7v-w585-jf46

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-pg7v-w585-jf46

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dashboard affected Chainguard kubernetes-dashboard —
kubernetes-dashboard affected Wolfi kubernetes-dashboard —
Upstream advisory

CGA-p49j-g2gg-h892

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-p49j-g2gg-h892

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
Upstream advisory

CGA-j54h-h9g9-4f32

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-j54h-h9g9-4f32

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
Upstream advisory

CGA-hhpp-gmjf-m6xj

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-hhpp-gmjf-m6xj

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
Upstream advisory

CGA-h678-4w9j-j6wr

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-h678-4w9j-j6wr

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-98fh-pv4f-x8cq

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-98fh-pv4f-x8cq

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.18 affected Chainguard istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.18 affected Wolfi istio-pilot-discovery-1.18 —
Upstream advisory

CGA-c9m6-f7jr-8pjj

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-c9m6-f7jr-8pjj

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.18 affected Chainguard istio-pilot-agent-1.18 —
istio-pilot-agent-1.18 affected Wolfi istio-pilot-agent-1.18 —
Upstream advisory

CGA-c7v7-959m-4j6c

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-c7v7-959m-4j6c

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
Upstream advisory

CGA-9wxp-4hh5-c5vg

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-9wxp-4hh5-c5vg

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
Upstream advisory

CGA-7x4c-fwj2-48qx

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-7x4c-fwj2-48qx

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected Chainguard vault-k8s —
vault-k8s affected Wolfi vault-k8s —
Upstream advisory

CGA-7chx-w4hq-qw46

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-7chx-w4hq-qw46

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
Upstream advisory

CGA-78x5-43hv-2jgx

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-78x5-43hv-2jgx

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
Upstream advisory

CGA-6v8q-9jxr-669v

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-6v8q-9jxr-669v

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
Upstream advisory

CGA-5xhr-w3v7-r8gj

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-5xhr-w3v7-r8gj

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s-fips affected Chainguard vault-k8s-fips —
Upstream advisory

CGA-53vg-2pc5-3jr9

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-53vg-2pc5-3jr9

Affected products

ProductStatusVendorPackageEcosystem
dex-k8s-authenticator affected Chainguard dex-k8s-authenticator —
Upstream advisory

CGA-4ppm-vqvr-m6q7

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-4ppm-vqvr-m6q7

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
Upstream advisory

CGA-4hjg-4m22-mv25

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-4hjg-4m22-mv25

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
Upstream advisory

CGA-56xm-g9pc-f9f7

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-56xm-g9pc-f9f7

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-3h9f-rjr4-86rw

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-3h9f-rjr4-86rw

Affected products

ProductStatusVendorPackageEcosystem
grpc-health-probe affected Chainguard grpc-health-probe —
grpc-health-probe affected Wolfi grpc-health-probe —
grpc-health-probe-compat affected Chainguard grpc-health-probe-compat —
grpc-health-probe-compat affected Wolfi grpc-health-probe-compat —
Upstream advisory

CGA-2mh5-3ghm-wxx8

Open SourceExploitedVulnCheck KEV listed2026-01-28

CGA-2mh5-3ghm-wxx8

Affected products

ProductStatusVendorPackageEcosystem
wavefront-collector-for-kubernetes-1.13 affected Chainguard wavefront-collector-for-kubernetes-1.13 —
Upstream advisory

CGA-7wrr-m3pv-pq78

Open SourceExploitedVulnCheck KEV listed2026-01-07

CGA-7wrr-m3pv-pq78

Affected products

ProductStatusVendorPackageEcosystem
aactl affected Wolfi aactl —
aactl affected Chainguard aactl —
actions-runner-controller affected Chainguard actions-runner-controller —
actions-runner-controller affected Wolfi actions-runner-controller —
amass affected Chainguard amass —
amass affected Wolfi amass —
apko affected Wolfi apko —
apko affected Chainguard apko —
argo-cd-2.7 affected Chainguard argo-cd-2.7 —
argo-cd-2.7 affected Wolfi argo-cd-2.7 —
argo-cd-2.8 affected Chainguard argo-cd-2.8 —
argo-cd-2.8 affected Wolfi argo-cd-2.8 —
argo-cd-2.9 affected Chainguard argo-cd-2.9 —
argo-cd-2.9 affected Wolfi argo-cd-2.9 —
argo-workflows affected Wolfi argo-workflows —
argo-workflows affected Chainguard argo-workflows —
atlantis affected Wolfi atlantis —
atlantis affected Chainguard atlantis —
atlantis-fips affected Chainguard atlantis-fips —
azure-aad-pod-identity-mic affected Chainguard azure-aad-pod-identity-mic —
bank-vaults affected Chainguard bank-vaults —
bank-vaults affected Wolfi bank-vaults —
bank-vaults-fips affected Chainguard bank-vaults-fips —
bank-vaults-template-fips affected Chainguard bank-vaults-template-fips —
bom affected Wolfi bom —
bom affected Chainguard bom —
boring-registry affected Wolfi boring-registry —
boring-registry affected Chainguard boring-registry —
buf affected Wolfi buf —
buf affected Chainguard buf —
buildctl affected Chainguard buildctl —
buildctl affected Wolfi buildctl —
buildkitd affected Chainguard buildkitd —
buildkitd affected Wolfi buildkitd —
caddy affected Wolfi caddy —
caddy affected Chainguard caddy —
cadvisor affected Wolfi cadvisor —
cadvisor affected Chainguard cadvisor —
calico affected Chainguard calico —
calico affected Wolfi calico —
calico-cni-fips-3.25-compat affected Chainguard calico-cni-fips-3.25-compat —
calicoctl-fips-3.25 affected Chainguard calicoctl-fips-3.25 —
calico-fips affected Chainguard calico-fips —
calico-fips-3.25 affected Chainguard calico-fips-3.25 —
calico-fips-apiserver-3.25 affected Chainguard calico-fips-apiserver-3.25 —
calico-fips-app-policy-3.25 affected Chainguard calico-fips-app-policy-3.25 —
calico-fips-cni-3.25 affected Chainguard calico-fips-cni-3.25 —
calico-fips-felix-3.25 affected Chainguard calico-fips-felix-3.25 —
calico-fips-kube-controllers-3.25 affected Chainguard calico-fips-kube-controllers-3.25 —
calico-fips-node-3.25 affected Chainguard calico-fips-node-3.25 —
calico-fips-pod2daemon-3.25 affected Chainguard calico-fips-pod2daemon-3.25 —
calico-fips-typha-client-3.25 affected Chainguard calico-fips-typha-client-3.25 —
calico-fips-typhad-3.25 affected Chainguard calico-fips-typhad-3.25 —
certificate-transparency affected Chainguard certificate-transparency —
certificate-transparency affected Wolfi certificate-transparency —
certificate-transparency-fips affected Chainguard certificate-transparency-fips —
cert-manager-1.11 affected Chainguard cert-manager-1.11 —
cert-manager-1.11 affected Wolfi cert-manager-1.11 —
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.13 affected Wolfi cert-manager-1.13 —
cert-manager-1.13 affected Chainguard cert-manager-1.13 —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-fips-1.13 affected Chainguard cert-manager-fips-1.13 —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
cfssl affected Chainguard cfssl —
cfssl affected Wolfi cfssl —
cilium-cli affected Chainguard cilium-cli —
cilium-cli affected Wolfi cilium-cli —
cloudflared affected Wolfi cloudflared —
cloudflared affected Chainguard cloudflared —
cloud-sql-proxy affected Chainguard cloud-sql-proxy —
cloud-sql-proxy affected Wolfi cloud-sql-proxy —
cloud-sql-proxy-fips affected Chainguard cloud-sql-proxy-fips —
cluster-autoscaler-1.25 affected Chainguard cluster-autoscaler-1.25 —
cluster-autoscaler-1.25 affected Wolfi cluster-autoscaler-1.25 —
cluster-autoscaler-fips-1.25 affected Chainguard cluster-autoscaler-fips-1.25 —
cluster-autoscaler-fips-1.25-compat affected Chainguard cluster-autoscaler-fips-1.25-compat —
cluster-autoscaler-fips-1.26 affected Chainguard cluster-autoscaler-fips-1.26 —
cluster-autoscaler-fips-1.26-compat affected Chainguard cluster-autoscaler-fips-1.26-compat —
cluster-autoscaler-fips-1.27 affected Chainguard cluster-autoscaler-fips-1.27 —
cluster-autoscaler-fips-1.27-compat affected Chainguard cluster-autoscaler-fips-1.27-compat —
cluster-autoscaler-fips-1.28 affected Chainguard cluster-autoscaler-fips-1.28 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
conftest affected Chainguard conftest —
conftest affected Wolfi conftest —
conftest-fips affected Chainguard conftest-fips —
consul-1.15 affected Wolfi consul-1.15 —
consul-1.15 affected Chainguard consul-1.15 —
consul-1.16 affected Chainguard consul-1.16 —
consul-1.16 affected Wolfi consul-1.16 —
containerd affected Chainguard containerd —
containerd affected Wolfi containerd —
containerd-service affected Chainguard containerd-service —
containerd-service affected Wolfi containerd-service —
containerd-shim affected Wolfi containerd-shim —
containerd-shim affected Chainguard containerd-shim —
containerd-shim-runc-v1 affected Chainguard containerd-shim-runc-v1 —
containerd-shim-runc-v1 affected Wolfi containerd-shim-runc-v1 —
containerd-shim-runc-v2 affected Chainguard containerd-shim-runc-v2 —
containerd-shim-runc-v2 affected Wolfi containerd-shim-runc-v2 —
containerd-stress affected Wolfi containerd-stress —
containerd-stress affected Chainguard containerd-stress —
coredns affected Chainguard coredns —
coredns affected Wolfi coredns —
cortex affected Chainguard cortex —
cortex affected Wolfi cortex —
cosign affected Chainguard cosign —
cosign affected Wolfi cosign —
cosign-fips affected Wolfi cosign-fips —
cosign-fips affected Chainguard cosign-fips —
crossplane affected Chainguard crossplane —
crossplane affected Wolfi crossplane —
crossplane-provider-aws affected Wolfi crossplane-provider-aws —
crossplane-provider-aws affected Chainguard crossplane-provider-aws —
crossplane-provider-azure affected Chainguard crossplane-provider-azure —
crossplane-provider-azure affected Wolfi crossplane-provider-azure —
crossplane-provider-azure-authorization affected Wolfi crossplane-provider-azure-authorization —
crossplane-provider-azure-authorization affected Chainguard crossplane-provider-azure-authorization —
crossplane-provider-azure-authorization-compat affected Chainguard crossplane-provider-azure-authorization-compat —
crossplane-provider-azure-authorization-compat affected Wolfi crossplane-provider-azure-authorization-compat —
crossplane-provider-azure-family affected Wolfi crossplane-provider-azure-family —
crossplane-provider-azure-family affected Chainguard crossplane-provider-azure-family —
crossplane-provider-azure-managedidentity affected Chainguard crossplane-provider-azure-managedidentity —
crossplane-provider-azure-managedidentity affected Wolfi crossplane-provider-azure-managedidentity —
crossplane-provider-azure-managedidentity-compat affected Chainguard crossplane-provider-azure-managedidentity-compat —
crossplane-provider-azure-managedidentity-compat affected Wolfi crossplane-provider-azure-managedidentity-compat —
crossplane-provider-azure-sql affected Chainguard crossplane-provider-azure-sql —
crossplane-provider-azure-sql affected Wolfi crossplane-provider-azure-sql —
crossplane-provider-azure-sql-compat affected Chainguard crossplane-provider-azure-sql-compat —
crossplane-provider-azure-sql-compat affected Wolfi crossplane-provider-azure-sql-compat —
crossplane-provider-azure-storage affected Wolfi crossplane-provider-azure-storage —
crossplane-provider-azure-storage affected Chainguard crossplane-provider-azure-storage —
crossplane-provider-azure-storage-compat affected Wolfi crossplane-provider-azure-storage-compat —
crossplane-provider-azure-storage-compat affected Chainguard crossplane-provider-azure-storage-compat —
crossplane-provider-family-azure affected Wolfi crossplane-provider-family-azure —
crossplane-provider-family-azure affected Chainguard crossplane-provider-family-azure —
crossplane-provider-family-azure-compat affected Wolfi crossplane-provider-family-azure-compat —
crossplane-provider-family-azure-compat affected Chainguard crossplane-provider-family-azure-compat —
ctr affected Wolfi ctr —
ctr affected Chainguard ctr —
dex affected Chainguard dex —
dex affected Wolfi dex —
dex-k8s-authenticator affected Chainguard dex-k8s-authenticator —
dgraph affected Chainguard dgraph —
dgraph affected Wolfi dgraph —
docker-credential-acr-env affected Chainguard docker-credential-acr-env —
docker-credential-acr-env affected Wolfi docker-credential-acr-env —
dockerize affected Wolfi dockerize —
dockerize affected Chainguard dockerize —
dockerize-fips affected Chainguard dockerize-fips —
dynamic-localpv-provisioner affected Chainguard dynamic-localpv-provisioner —
dynamic-localpv-provisioner affected Wolfi dynamic-localpv-provisioner —
dynamic-localpv-provisioner-fips affected Chainguard dynamic-localpv-provisioner-fips —
eksctl affected Wolfi eksctl —
eksctl affected Chainguard eksctl —
external-dns affected Chainguard external-dns —
external-dns affected Wolfi external-dns —
external-dns-0.13.5 affected Chainguard external-dns-0.13.5 —
external-dns-fips affected Chainguard external-dns-fips —
external-secrets-0.7 affected Chainguard external-secrets-0.7 —
external-secrets-operator affected Chainguard external-secrets-operator —
external-secrets-operator affected Wolfi external-secrets-operator —
falco affected Chainguard falco —
falco affected Wolfi falco —
falcoctl affected Chainguard falcoctl —
falcoctl affected Wolfi falcoctl —
falcoctl-fips affected Chainguard falcoctl-fips —
falco-dev affected Chainguard falco-dev —
falco-dev affected Wolfi falco-dev —
falco-src affected Chainguard falco-src —
falco-src affected Wolfi falco-src —
ferretdb affected Chainguard ferretdb —
ferretdb affected Wolfi ferretdb —
flux affected Chainguard flux —
flux affected Wolfi flux —
flux-0 affected Chainguard flux-0 —
flux-0.37 affected Chainguard flux-0.37 —
flux-2.0 affected Chainguard flux-2.0 —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller-0 affected Chainguard flux-helm-controller-0 —
flux-helm-controller-0.37 affected Chainguard flux-helm-controller-0.37 —
flux-helm-controller-2.0 affected Chainguard flux-helm-controller-2.0 —
flux-image-automation-controller affected Wolfi flux-image-automation-controller —
flux-image-automation-controller affected Chainguard flux-image-automation-controller —
flux-image-reflector-controller affected Wolfi flux-image-reflector-controller —
flux-image-reflector-controller affected Chainguard flux-image-reflector-controller —
flux-image-reflector-controller-0 affected Chainguard flux-image-reflector-controller-0 —
flux-kustomize-controller affected Wolfi flux-kustomize-controller —
flux-kustomize-controller affected Chainguard flux-kustomize-controller —
flux-kustomize-controller-0 affected Chainguard flux-kustomize-controller-0 —
flux-kustomize-controller-0.37 affected Chainguard flux-kustomize-controller-0.37 —
flux-kustomize-controller-2.0 affected Chainguard flux-kustomize-controller-2.0 —
flux-notification-controller-0 affected Chainguard flux-notification-controller-0 —
flux-notification-controller-0.37 affected Chainguard flux-notification-controller-0.37 —
flux-notification-controller-2.0 affected Chainguard flux-notification-controller-2.0 —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller-0 affected Chainguard flux-source-controller-0 —
flux-source-controller-0.37 affected Chainguard flux-source-controller-0.37 —
flux-source-controller-2.0 affected Chainguard flux-source-controller-2.0 —
fq affected Chainguard fq —
fq affected Wolfi fq —
frp affected Wolfi frp —
frp affected Chainguard frp —
fulcio affected Chainguard fulcio —
fulcio affected Wolfi fulcio —
fulcio-fips affected Chainguard fulcio-fips —
gatekeeper-3.12 affected Wolfi gatekeeper-3.12 —
gatekeeper-3.12 affected Chainguard gatekeeper-3.12 —
gatekeeper-3.13 affected Wolfi gatekeeper-3.13 —
gatekeeper-3.13 affected Chainguard gatekeeper-3.13 —
gatekeeper-3.14 affected Wolfi gatekeeper-3.14 —
gatekeeper-3.14 affected Chainguard gatekeeper-3.14 —
gatekeeper-fips-3.13 affected Chainguard gatekeeper-fips-3.13 —
gatekeeper-fips-3.13-compat affected Chainguard gatekeeper-fips-3.13-compat —
gatekeeper-fips-3.14 affected Chainguard gatekeeper-fips-3.14 —
gh affected Wolfi gh —
gh affected Chainguard gh —
gh-doc affected Chainguard gh-doc —
gh-doc affected Wolfi gh-doc —
gitlab-kas affected Wolfi gitlab-kas —
gitlab-kas affected Chainguard gitlab-kas —
gitlab-pages affected Wolfi gitlab-pages —
gitlab-pages affected Chainguard gitlab-pages —
gitlab-runner affected Chainguard gitlab-runner —
gitlab-runner affected Wolfi gitlab-runner —
git-lfs affected Chainguard git-lfs —
git-lfs affected Wolfi git-lfs —
gitness affected Wolfi gitness —
gitness affected Chainguard gitness —
gitsign affected Wolfi gitsign —
gitsign affected Chainguard gitsign —
gitsign-config affected Wolfi gitsign-config —
gitsign-config affected Chainguard gitsign-config —
gitsign-credential-cache affected Chainguard gitsign-credential-cache —
gitsign-credential-cache affected Wolfi gitsign-credential-cache —
gobuster affected Chainguard gobuster —
gobuster affected Wolfi gobuster —
go-licenses affected Wolfi go-licenses —
go-licenses affected Chainguard go-licenses —
gomplate affected Wolfi gomplate —
gomplate affected Chainguard gomplate —
goreleaser-1.18 affected Chainguard goreleaser-1.18 —
goreleaser-1.18 affected Wolfi goreleaser-1.18 —
gpu-operator affected Chainguard gpu-operator —
grafana affected Wolfi grafana —
grafana affected Chainguard grafana —
grafana-7 affected Chainguard grafana-7 —
grafana-9.3 affected Chainguard grafana-9.3 —
grpc-health-probe affected Chainguard grpc-health-probe —
grpc-health-probe affected Wolfi grpc-health-probe —
grype affected Wolfi grype —
grype affected Chainguard grype —
haproxy-ingress affected Chainguard haproxy-ingress —
haproxy-ingress affected Wolfi haproxy-ingress —
helm affected Wolfi helm —
helm affected Chainguard helm —
helm-3 affected Chainguard helm-3 —
helm-3 affected Wolfi helm-3 —
helm-4 affected Chainguard helm-4 —
helm-4 affected Wolfi helm-4 —
helm-push affected Chainguard helm-push —
helm-push affected Wolfi helm-push —
hugo affected Wolfi hugo —
hugo affected Chainguard hugo —
influxd affected Chainguard influxd —
influxd affected Wolfi influxd —
ipfs affected Chainguard ipfs —
ipfs affected Wolfi ipfs —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-pilot-agent-1.18 affected Chainguard istio-pilot-agent-1.18 —
istio-pilot-agent-1.18 affected Wolfi istio-pilot-agent-1.18 —
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
istio-pilot-discovery-1.18 affected Wolfi istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.18 affected Chainguard istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
k3d affected Chainguard k3d —
k3d affected Wolfi k3d —
k3d-proxy affected Wolfi k3d-proxy —
k3d-proxy affected Chainguard k3d-proxy —
k3d-tools affected Chainguard k3d-tools —
k3d-tools affected Wolfi k3d-tools —
k3s affected Chainguard k3s —
k3s affected Wolfi k3s —
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
kaf affected Wolfi kaf —
kaf affected Chainguard kaf —
karpenter-0.23 affected Chainguard karpenter-0.23 —
keda-2.8 affected Chainguard keda-2.8 —
keda-2.9 affected Chainguard keda-2.9 —
kiam affected Chainguard kiam —
ko affected Wolfi ko —
ko affected Chainguard ko —
ko-fips affected Chainguard ko-fips —
ko-fips affected Wolfi ko-fips —
kots affected Chainguard kots —
kots affected Wolfi kots —
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-fips-1.27 affected Chainguard kubeadm-fips-1.27 —
kubeadm-fips-1.27-default affected Chainguard kubeadm-fips-1.27-default —
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-apiserver-fips-1.27 affected Chainguard kube-apiserver-fips-1.27 —
kube-apiserver-fips-1.27-default affected Chainguard kube-apiserver-fips-1.27-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kube-controller-manager-fips-1.27 affected Chainguard kube-controller-manager-fips-1.27 —
kube-controller-manager-fips-1.27-default affected Chainguard kube-controller-manager-fips-1.27-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-1.29-iamguarded-compat affected Chainguard kubectl-1.29-iamguarded-compat —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubectl-bash-completion-fips-1.27 affected Chainguard kubectl-bash-completion-fips-1.27 —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.27 affected Chainguard kubectl-fips-1.27 —
kubectl-fips-1.27-default affected Chainguard kubectl-fips-1.27-default —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubeflow affected Wolfi kubeflow —
kubeflow affected Chainguard kubeflow —
kubeflow-access-management affected Chainguard kubeflow-access-management —
kubeflow-access-management affected Wolfi kubeflow-access-management —
kubeflow-access-management-compat affected Chainguard kubeflow-access-management-compat —
kubeflow-access-management-compat affected Wolfi kubeflow-access-management-compat —
kubeflow-access-management-fips affected Chainguard kubeflow-access-management-fips —
kubeflow-access-management-fips-compat affected Chainguard kubeflow-access-management-fips-compat —
kubeflow-admission-webhook affected Wolfi kubeflow-admission-webhook —
kubeflow-admission-webhook affected Chainguard kubeflow-admission-webhook —
kubeflow-admission-webhook-compat affected Chainguard kubeflow-admission-webhook-compat —
kubeflow-admission-webhook-compat affected Wolfi kubeflow-admission-webhook-compat —
kubeflow-admission-webhook-fips affected Chainguard kubeflow-admission-webhook-fips —
kubeflow-admission-webhook-fips-compat affected Chainguard kubeflow-admission-webhook-fips-compat —
kubeflow-fips affected Chainguard kubeflow-fips —
kubeflow-katib affected Wolfi kubeflow-katib —
kubeflow-katib affected Chainguard kubeflow-katib —
kubeflow-notebook-controller affected Wolfi kubeflow-notebook-controller —
kubeflow-notebook-controller affected Chainguard kubeflow-notebook-controller —
kubeflow-notebook-controller-compat affected Wolfi kubeflow-notebook-controller-compat —
kubeflow-notebook-controller-compat affected Chainguard kubeflow-notebook-controller-compat —
kubeflow-notebook-controller-fips affected Chainguard kubeflow-notebook-controller-fips —
kubeflow-notebook-controller-fips-compat affected Chainguard kubeflow-notebook-controller-fips-compat —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-profile-controller affected Wolfi kubeflow-profile-controller —
kubeflow-profile-controller affected Chainguard kubeflow-profile-controller —
kubeflow-profile-controller-compat affected Chainguard kubeflow-profile-controller-compat —
kubeflow-profile-controller-compat affected Wolfi kubeflow-profile-controller-compat —
kubeflow-profile-controller-fips affected Chainguard kubeflow-profile-controller-fips —
kubeflow-profile-controller-fips-compat affected Chainguard kubeflow-profile-controller-fips-compat —
kubeflow-pvcviewer-controller affected Chainguard kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller affected Wolfi kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller-compat affected Chainguard kubeflow-pvcviewer-controller-compat —
kubeflow-pvcviewer-controller-compat affected Wolfi kubeflow-pvcviewer-controller-compat —
kubeflow-pvcviewer-controller-fips affected Chainguard kubeflow-pvcviewer-controller-fips —
kubeflow-pvcviewer-controller-fips-compat affected Chainguard kubeflow-pvcviewer-controller-fips-compat —
kubeflow-tensorboard-controller affected Wolfi kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller affected Chainguard kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller-compat affected Wolfi kubeflow-tensorboard-controller-compat —
kubeflow-tensorboard-controller-compat affected Chainguard kubeflow-tensorboard-controller-compat —
kubeflow-tensorboard-controller-fips affected Chainguard kubeflow-tensorboard-controller-fips —
kubeflow-tensorboard-controller-fips-compat affected Chainguard kubeflow-tensorboard-controller-fips-compat —
kube-fluentd-operator affected Wolfi kube-fluentd-operator —
kube-fluentd-operator affected Chainguard kube-fluentd-operator —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-fips-1.27 affected Chainguard kubelet-fips-1.27 —
kubelet-fips-1.27-default affected Chainguard kubelet-fips-1.27-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-logging-logging-operator-3.17 affected Chainguard kube-logging-logging-operator-3.17 —
kube-oidc-proxy affected Chainguard kube-oidc-proxy —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kube-proxy-fips-1.27 affected Chainguard kube-proxy-fips-1.27 —
kube-proxy-fips-1.27-default affected Chainguard kube-proxy-fips-1.27-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kube-rbac-proxy affected Wolfi kube-rbac-proxy —
kube-rbac-proxy affected Chainguard kube-rbac-proxy —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-dashboard affected Wolfi kubernetes-dashboard —
kubernetes-dashboard affected Chainguard kubernetes-dashboard —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
kubernetes-event-exporter affected Wolfi kubernetes-event-exporter —
kubernetes-event-exporter affected Chainguard kubernetes-event-exporter —
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
kubernetes-fips-1.27-default affected Chainguard kubernetes-fips-1.27-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kubernetes-pause-fips-3.9 affected Chainguard kubernetes-pause-fips-3.9 —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
kube-scheduler-fips-1.27 affected Chainguard kube-scheduler-fips-1.27 —
kube-scheduler-fips-1.27-default affected Chainguard kube-scheduler-fips-1.27-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
kube-state-metrics affected Wolfi kube-state-metrics —
kube-state-metrics affected Chainguard kube-state-metrics —
kube-state-metrics-2.2.0 affected Chainguard kube-state-metrics-2.2.0 —
kube-state-metrics-2.6 affected Chainguard kube-state-metrics-2.6 —
kube-state-metrics-fips affected Chainguard kube-state-metrics-fips —
kubewatch affected Chainguard kubewatch —
kubewatch affected Wolfi kubewatch —
kyverno affected Chainguard kyverno —
kyverno affected Wolfi kyverno —
kyverno-policy-reporter affected Chainguard kyverno-policy-reporter —
kyverno-policy-reporter affected Wolfi kyverno-policy-reporter —
libssh affected Chainguard libssh —
libssh affected Wolfi libssh —
libssh2 affected Chainguard libssh2 —
libssh2 affected Wolfi libssh2 —
local-path-provisioner affected Wolfi local-path-provisioner —
local-path-provisioner affected Chainguard local-path-provisioner —
loki affected Wolfi loki —
loki affected Chainguard loki —
melange affected Chainguard melange —
melange affected Wolfi melange —
memcached-exporter affected Wolfi memcached-exporter —
memcached-exporter affected Chainguard memcached-exporter —
metrics-server affected Chainguard metrics-server —
metrics-server affected Wolfi metrics-server —
metrics-server-fips affected Chainguard metrics-server-fips —
mongo-tools affected Chainguard mongo-tools —
mongo-tools affected Wolfi mongo-tools —
nats affected Wolfi nats —
nats affected Chainguard nats —
nats-server affected Chainguard nats-server —
nats-server affected Wolfi nats-server —
nerdctl affected Chainguard nerdctl —
nerdctl affected Wolfi nerdctl —
nfs-subdir-external-provisioner affected Wolfi nfs-subdir-external-provisioner —
nfs-subdir-external-provisioner affected Chainguard nfs-subdir-external-provisioner —
nfs-subdir-external-provisioner-fips affected Chainguard nfs-subdir-external-provisioner-fips —
node-problem-detector-0.8 affected Wolfi node-problem-detector-0.8 —
node-problem-detector-0.8 affected Chainguard node-problem-detector-0.8 —
nri-kafka affected Chainguard nri-kafka —
nri-kafka affected Wolfi nri-kafka —
nri-mssql affected Chainguard nri-mssql —
nri-mssql affected Wolfi nri-mssql —
nsc affected Wolfi nsc —
nsc affected Chainguard nsc —
oauth2-proxy affected Wolfi oauth2-proxy —
oauth2-proxy affected Chainguard oauth2-proxy —
ollama affected Wolfi ollama —
ollama affected Chainguard ollama —
opentofu affected Wolfi opentofu —
opentofu affected Chainguard opentofu —
opentofu-1.6 affected Chainguard opentofu-1.6 —
opentofu-1.6-compat affected Chainguard opentofu-1.6-compat —
opentofu-1.6-local-provider-config affected Chainguard opentofu-1.6-local-provider-config —
prometheus affected Chainguard prometheus —
prometheus affected Wolfi prometheus —
prometheus-2.38 affected Chainguard prometheus-2.38 —
prometheus-adapter affected Chainguard prometheus-adapter —
prometheus-adapter affected Wolfi prometheus-adapter —
prometheus-adapter-0.10 affected Chainguard prometheus-adapter-0.10 —
prometheus-adapter-fips affected Chainguard prometheus-adapter-fips —
prometheus-adapter-fips-0.10 affected Chainguard prometheus-adapter-fips-0.10 —
prometheus-alertmanager affected Chainguard prometheus-alertmanager —
prometheus-alertmanager affected Wolfi prometheus-alertmanager —
prometheus-bind-exporter affected Wolfi prometheus-bind-exporter —
prometheus-bind-exporter affected Chainguard prometheus-bind-exporter —
prometheus-blackbox-exporter affected Wolfi prometheus-blackbox-exporter —
prometheus-blackbox-exporter affected Chainguard prometheus-blackbox-exporter —
prometheus-blackbox-exporter-compat affected Chainguard prometheus-blackbox-exporter-compat —
prometheus-blackbox-exporter-compat affected Wolfi prometheus-blackbox-exporter-compat —
prometheus-blackbox-exporter-iamguarded-compat affected Chainguard prometheus-blackbox-exporter-iamguarded-compat —
prometheus-elasticsearch-exporter-fips affected Chainguard prometheus-elasticsearch-exporter-fips —
prometheus-fips affected Chainguard prometheus-fips —
prometheus-mongodb-exporter affected Chainguard prometheus-mongodb-exporter —
prometheus-mongodb-exporter affected Wolfi prometheus-mongodb-exporter —
prometheus-mongodb-exporter-0.37 affected Chainguard prometheus-mongodb-exporter-0.37 —
prometheus-mongodb-exporter-fips affected Chainguard prometheus-mongodb-exporter-fips —
prometheus-mongodb-exporter-fips-0.37 affected Chainguard prometheus-mongodb-exporter-fips-0.37 —
prometheus-mysqld-exporter affected Wolfi prometheus-mysqld-exporter —
prometheus-mysqld-exporter affected Chainguard prometheus-mysqld-exporter —
prometheus-nats-exporter affected Wolfi prometheus-nats-exporter —
prometheus-nats-exporter affected Chainguard prometheus-nats-exporter —
prometheus-node-exporter affected Wolfi prometheus-node-exporter —
prometheus-node-exporter affected Chainguard prometheus-node-exporter —
prometheus-node-exporter-1.4 affected Chainguard prometheus-node-exporter-1.4 —
prometheus-node-exporter-1.5 affected Chainguard prometheus-node-exporter-1.5 —
prometheus-node-exporter-fips affected Chainguard prometheus-node-exporter-fips —
prometheus-postgres-exporter affected Wolfi prometheus-postgres-exporter —
prometheus-postgres-exporter affected Chainguard prometheus-postgres-exporter —
prometheus-postgres-exporter-0.10 affected Chainguard prometheus-postgres-exporter-0.10 —
prometheus-postgres-exporter-0.13 affected Chainguard prometheus-postgres-exporter-0.13 —
prometheus-postgres-exporter-fips affected Chainguard prometheus-postgres-exporter-fips —
prometheus-postgres-exporter-fips-iamguarded-compat affected Chainguard prometheus-postgres-exporter-fips-iamguarded-compat —
prometheus-pushgateway-1.4 affected Chainguard prometheus-pushgateway-1.4 —
prometheus-pushgateway-fips affected Chainguard prometheus-pushgateway-fips —
prometheus-pushgateway-fips-1.4 affected Chainguard prometheus-pushgateway-fips-1.4 —
prometheus-stackdriver-exporter affected Wolfi prometheus-stackdriver-exporter —
prometheus-stackdriver-exporter affected Chainguard prometheus-stackdriver-exporter —
prometheus-statsd-exporter affected Chainguard prometheus-statsd-exporter —
prometheus-statsd-exporter affected Wolfi prometheus-statsd-exporter —
prometheus-statsd-exporter-fips affected Chainguard prometheus-statsd-exporter-fips —
pulumi affected Chainguard pulumi —
pulumi affected Wolfi pulumi —
rekor affected Wolfi rekor —
rekor affected Chainguard rekor —
rekor-fips affected Chainguard rekor-fips —
rqlite affected Wolfi rqlite —
rqlite affected Chainguard rqlite —
scorecard affected Chainguard scorecard —
scorecard affected Wolfi scorecard —
secrets-store-csi-driver affected Wolfi secrets-store-csi-driver —
secrets-store-csi-driver affected Chainguard secrets-store-csi-driver —
secrets-store-csi-driver-provider-azure affected Chainguard secrets-store-csi-driver-provider-azure —
secrets-store-csi-driver-provider-azure affected Wolfi secrets-store-csi-driver-provider-azure —
sigstore-scaffolding affected Chainguard sigstore-scaffolding —
sigstore-scaffolding affected Wolfi sigstore-scaffolding —
sigstore-scaffolding-fips affected Chainguard sigstore-scaffolding-fips —
skopeo affected Wolfi skopeo —
skopeo affected Chainguard skopeo —
slsa-verifier affected Chainguard slsa-verifier —
slsa-verifier affected Wolfi slsa-verifier —
sops affected Chainguard sops —
sops affected Wolfi sops —
sparkctl affected Wolfi sparkctl —
sparkctl affected Chainguard sparkctl —
spark-operator affected Chainguard spark-operator —
spark-operator affected Wolfi spark-operator —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
spire-server affected Chainguard spire-server —
spire-server affected Wolfi spire-server —
spire-server-fips affected Chainguard spire-server-fips —
src affected Wolfi src —
src affected Chainguard src —
src-fingerprint affected Chainguard src-fingerprint —
src-fingerprint affected Wolfi src-fingerprint —
step affected Wolfi step —
step affected Chainguard step —
step-ca affected Chainguard step-ca —
step-ca affected Wolfi step-ca —
tekton-chains affected Wolfi tekton-chains —
tekton-chains affected Chainguard tekton-chains —
tekton-pipelines affected Chainguard tekton-pipelines —
tekton-pipelines affected Wolfi tekton-pipelines —
telegraf-1.26 affected Wolfi telegraf-1.26 —
telegraf-1.26 affected Chainguard telegraf-1.26 —
telegraf-1.27 affected Wolfi telegraf-1.27 —
telegraf-1.27 affected Chainguard telegraf-1.27 —
telegraf-1.28 affected Chainguard telegraf-1.28 —
telegraf-1.28 affected Wolfi telegraf-1.28 —
telegraf-1.29 affected Wolfi telegraf-1.29 —
telegraf-1.29 affected Chainguard telegraf-1.29 —
temporal affected Chainguard temporal —
temporal affected Wolfi temporal —
temporal-fips affected Chainguard temporal-fips —
temporal-server affected Wolfi temporal-server —
temporal-server affected Chainguard temporal-server —
temporal-server-fips affected Chainguard temporal-server-fips —
temporal-ui-server affected Chainguard temporal-ui-server —
temporal-ui-server affected Wolfi temporal-ui-server —
temporal-ui-server-fips affected Chainguard temporal-ui-server-fips —
terraform affected Wolfi terraform —
terraform affected Chainguard terraform —
terraform-docs affected Wolfi terraform-docs —
terraform-docs affected Chainguard terraform-docs —
terraform-fips-1.5 affected Chainguard terraform-fips-1.5 —
terraform-provider-aws affected Wolfi terraform-provider-aws —
terraform-provider-aws affected Chainguard terraform-provider-aws —
terraform-provider-azurerm affected Chainguard terraform-provider-azurerm —
terraform-provider-azurerm affected Wolfi terraform-provider-azurerm —
terraform-provider-sendgrid affected Wolfi terraform-provider-sendgrid —
terraform-provider-sendgrid affected Chainguard terraform-provider-sendgrid —
terraform-provider-sendgrid-fips affected Chainguard terraform-provider-sendgrid-fips —
terragrunt affected Wolfi terragrunt —
terragrunt affected Chainguard terragrunt —
thanos-0.31 affected Chainguard thanos-0.31 —
thanos-0.31 affected Wolfi thanos-0.31 —
thanos-0.32 affected Wolfi thanos-0.32 —
thanos-0.32 affected Chainguard thanos-0.32 —
tigera-operator-1.28 affected Chainguard tigera-operator-1.28 —
tigera-operator-1.29 affected Chainguard tigera-operator-1.29 —
tigera-operator-1.30 affected Wolfi tigera-operator-1.30 —
tigera-operator-1.30 affected Chainguard tigera-operator-1.30 —
tigera-operator-1.31 affected Chainguard tigera-operator-1.31 —
tigera-operator-1.31 affected Wolfi tigera-operator-1.31 —
tigera-operator-fips affected Chainguard tigera-operator-fips —
tigera-operator-fips-1.29 affected Chainguard tigera-operator-fips-1.29 —
tigera-operator-fips-1.32 affected Chainguard tigera-operator-fips-1.32 —
timestamp-authority-fips affected Chainguard timestamp-authority-fips —
tkn affected Chainguard tkn —
tkn affected Wolfi tkn —
traefik affected Wolfi traefik —
traefik affected Chainguard traefik —
trillian affected Wolfi trillian —
trillian affected Chainguard trillian —
trillian-fips affected Chainguard trillian-fips —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
up affected Chainguard up —
up affected Wolfi up —
vault-1.13 affected Wolfi vault-1.13 —
vault-1.13 affected Chainguard vault-1.13 —
vault-csi-provider affected Chainguard vault-csi-provider —
vault-csi-provider affected Wolfi vault-csi-provider —
vault-csi-provider-compat affected Wolfi vault-csi-provider-compat —
vault-csi-provider-compat affected Chainguard vault-csi-provider-compat —
vault-fips-1.14 affected Chainguard vault-fips-1.14 —
vault-k8s affected Chainguard vault-k8s —
vault-k8s affected Wolfi vault-k8s —
vault-k8s-fips affected Chainguard vault-k8s-fips —
vexctl affected Chainguard vexctl —
vexctl affected Wolfi vexctl —
wavefront-collector-for-kubernetes-1.12 affected Chainguard wavefront-collector-for-kubernetes-1.12 —
wavefront-collector-for-kubernetes-1.13 affected Chainguard wavefront-collector-for-kubernetes-1.13 —
weaviate affected Chainguard weaviate —
weaviate affected Wolfi weaviate —
wireguard-go affected Chainguard wireguard-go —
wireguard-go affected Wolfi wireguard-go —
zot affected Wolfi zot —
zot affected Chainguard zot —
Upstream advisory

CGA-4m3q-q259-cf3q

GoogleExploitedVulnCheck KEV listed2026-01-29

CGA-4m3q-q259-cf3q

Affected products

ProductStatusVendorPackageEcosystem
dependency-track affected Wolfi dependency-track —
dependency-track affected Chainguard dependency-track —
dependency-track-bundled affected Wolfi dependency-track-bundled —
dependency-track-bundled affected Chainguard dependency-track-bundled —
keycloak affected Wolfi keycloak —
keycloak affected Chainguard keycloak —
keycloak-bitnami-compat affected Chainguard keycloak-bitnami-compat —
keycloak-bitnami-compat affected Wolfi keycloak-bitnami-compat —
keycloak-bitnami-fips affected Chainguard keycloak-bitnami-fips —
keycloak-compat affected Wolfi keycloak-compat —
keycloak-compat affected Chainguard keycloak-compat —
keycloak-fips affected Chainguard keycloak-fips —
keycloak-fips-bitnami-compat affected Chainguard keycloak-fips-bitnami-compat —
keycloak-fips-policy-140-2 affected Chainguard keycloak-fips-policy-140-2 —
keycloak-fips-policy-140-3 affected Chainguard keycloak-fips-policy-140-3 —
keycloak-iamguarded-compat affected Wolfi keycloak-iamguarded-compat —
keycloak-iamguarded-compat affected Chainguard keycloak-iamguarded-compat —
keycloak-iamguarded-fips affected Chainguard keycloak-iamguarded-fips —
mariadb-10.11 affected Chainguard mariadb-10.11 —
mariadb-10.11 affected Wolfi mariadb-10.11 —
mariadb-10.11-backup affected Wolfi mariadb-10.11-backup —
mariadb-10.11-backup affected Chainguard mariadb-10.11-backup —
mariadb-10.11-bench affected Wolfi mariadb-10.11-bench —
mariadb-10.11-bench affected Chainguard mariadb-10.11-bench —
mariadb-10.11-client affected Chainguard mariadb-10.11-client —
mariadb-10.11-client affected Wolfi mariadb-10.11-client —
mariadb-10.11-dev affected Wolfi mariadb-10.11-dev —
mariadb-10.11-dev affected Chainguard mariadb-10.11-dev —
mariadb-10.11-doc affected Wolfi mariadb-10.11-doc —
mariadb-10.11-doc affected Chainguard mariadb-10.11-doc —
mariadb-10.11-embedded affected Wolfi mariadb-10.11-embedded —
mariadb-10.11-embedded affected Chainguard mariadb-10.11-embedded —
mariadb-10.11-oci-entrypoint affected Wolfi mariadb-10.11-oci-entrypoint —
mariadb-10.11-oci-entrypoint affected Chainguard mariadb-10.11-oci-entrypoint —
mariadb-10.11-test affected Wolfi mariadb-10.11-test —
mariadb-10.11-test affected Chainguard mariadb-10.11-test —
mariadb-10.6 affected Chainguard mariadb-10.6 —
mariadb-10.6 affected Wolfi mariadb-10.6 —
mariadb-10.6-backup affected Wolfi mariadb-10.6-backup —
mariadb-10.6-backup affected Chainguard mariadb-10.6-backup —
mariadb-10.6-bench affected Chainguard mariadb-10.6-bench —
mariadb-10.6-bench affected Wolfi mariadb-10.6-bench —
mariadb-10.6-client affected Chainguard mariadb-10.6-client —
mariadb-10.6-client affected Wolfi mariadb-10.6-client —
mariadb-10.6-dev affected Wolfi mariadb-10.6-dev —
mariadb-10.6-dev affected Chainguard mariadb-10.6-dev —
mariadb-10.6-doc affected Wolfi mariadb-10.6-doc —
mariadb-10.6-doc affected Chainguard mariadb-10.6-doc —
mariadb-10.6-embedded affected Wolfi mariadb-10.6-embedded —
mariadb-10.6-embedded affected Chainguard mariadb-10.6-embedded —
mariadb-10.6-oci-entrypoint affected Chainguard mariadb-10.6-oci-entrypoint —
mariadb-10.6-oci-entrypoint affected Wolfi mariadb-10.6-oci-entrypoint —
mariadb-10.6-test affected Wolfi mariadb-10.6-test —
mariadb-10.6-test affected Chainguard mariadb-10.6-test —
mariadb-11.2 affected Chainguard mariadb-11.2 —
mariadb-11.2 affected Wolfi mariadb-11.2 —
mariadb-11.2-backup affected Wolfi mariadb-11.2-backup —
mariadb-11.2-backup affected Chainguard mariadb-11.2-backup —
mariadb-11.2-bench affected Wolfi mariadb-11.2-bench —
mariadb-11.2-bench affected Chainguard mariadb-11.2-bench —
mariadb-11.2-client affected Wolfi mariadb-11.2-client —
mariadb-11.2-client affected Chainguard mariadb-11.2-client —
mariadb-11.2-dev affected Chainguard mariadb-11.2-dev —
mariadb-11.2-dev affected Wolfi mariadb-11.2-dev —
mariadb-11.2-doc affected Wolfi mariadb-11.2-doc —
mariadb-11.2-doc affected Chainguard mariadb-11.2-doc —
mariadb-11.2-embedded affected Chainguard mariadb-11.2-embedded —
mariadb-11.2-embedded affected Wolfi mariadb-11.2-embedded —
mariadb-11.2-oci-entrypoint affected Chainguard mariadb-11.2-oci-entrypoint —
mariadb-11.2-oci-entrypoint affected Wolfi mariadb-11.2-oci-entrypoint —
mariadb-11.2-test affected Chainguard mariadb-11.2-test —
mariadb-11.2-test affected Wolfi mariadb-11.2-test —
mariadb-test affected Chainguard mariadb-test —
mariadb-test affected Wolfi mariadb-test —
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-2jc3-3rhh-rc7v

GoogleExploitedVulnCheck KEV listed2026-01-28

CGA-2jc3-3rhh-rc7v

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-56gj-q646-p24j

Open SourceWeaponized exploit2026-01-29

CGA-56gj-q646-p24j

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
firefox affected Chainguard firefox —
firefox affected Wolfi firefox —
Upstream advisory

CGA-fwq2-97h4-6vq8

Open SourceWeaponized exploit2026-01-28

CGA-fwq2-97h4-6vq8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-rh32-ggmx-394w

Open SourceWeaponized exploit2026-01-29

CGA-rh32-ggmx-394w

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
firefox affected Wolfi firefox —
firefox affected Chainguard firefox —
openjdk-11-openj9 affected Chainguard openjdk-11-openj9 —
openjdk-11-openj9-dbg affected Chainguard openjdk-11-openj9-dbg —
openjdk-11-openj9-default-jdk affected Chainguard openjdk-11-openj9-default-jdk —
openjdk-11-openj9-default-jvm affected Chainguard openjdk-11-openj9-default-jvm —
openjdk-11-openj9-default-policy affected Chainguard openjdk-11-openj9-default-policy —
openjdk-11-openj9-doc affected Chainguard openjdk-11-openj9-doc —
openjdk-11-openj9-jmods affected Chainguard openjdk-11-openj9-jmods —
openjdk-11-openj9-jre affected Chainguard openjdk-11-openj9-jre —
openjdk-17-openj9 affected Chainguard openjdk-17-openj9 —
openjdk-17-openj9-dbg affected Chainguard openjdk-17-openj9-dbg —
openjdk-17-openj9-default-jdk affected Chainguard openjdk-17-openj9-default-jdk —
openjdk-17-openj9-default-jvm affected Chainguard openjdk-17-openj9-default-jvm —
openjdk-17-openj9-default-policy affected Chainguard openjdk-17-openj9-default-policy —
openjdk-17-openj9-doc affected Chainguard openjdk-17-openj9-doc —
openjdk-17-openj9-jmods affected Chainguard openjdk-17-openj9-jmods —
openjdk-17-openj9-jre affected Chainguard openjdk-17-openj9-jre —
openjdk-21-openj9 affected Chainguard openjdk-21-openj9 —
openjdk-21-openj9-dbg affected Chainguard openjdk-21-openj9-dbg —
openjdk-21-openj9-default-jdk affected Chainguard openjdk-21-openj9-default-jdk —
openjdk-21-openj9-default-jvm affected Chainguard openjdk-21-openj9-default-jvm —
openjdk-21-openj9-default-policy affected Chainguard openjdk-21-openj9-default-policy —
openjdk-21-openj9-doc affected Chainguard openjdk-21-openj9-doc —
openjdk-21-openj9-jmods affected Chainguard openjdk-21-openj9-jmods —
openjdk-21-openj9-jre affected Chainguard openjdk-21-openj9-jre —
openjdk-8-openj9 affected Chainguard openjdk-8-openj9 —
openjdk-8-openj9-dbg affected Chainguard openjdk-8-openj9-dbg —
openjdk-8-openj9-default-jdk affected Chainguard openjdk-8-openj9-default-jdk —
openjdk-8-openj9-default-jvm affected Chainguard openjdk-8-openj9-default-jvm —
openjdk-8-openj9-doc affected Chainguard openjdk-8-openj9-doc —
openjdk-8-openj9-jre affected Chainguard openjdk-8-openj9-jre —
Upstream advisory

CGA-m3vx-v2q7-5ghm

Open SourceWeaponized exploit2026-01-28

CGA-m3vx-v2q7-5ghm

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-rw74-h3gm-g3gf

Open SourceWeaponized exploit2026-01-29

CGA-rw74-h3gm-g3gf

Affected products

ProductStatusVendorPackageEcosystem
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-35wr-xgrg-x7wc

Open SourceWeaponized exploit2026-01-28

CGA-35wr-xgrg-x7wc

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-vrx8-q4vq-5c46

Open SourceWeaponized exploit2026-01-29

CGA-vrx8-q4vq-5c46

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-fw8f-v5xg-r4gx

Open SourceWeaponized exploit2026-01-28

CGA-fw8f-v5xg-r4gx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-52r6-w4jx-4r32

Open SourceWeaponized exploit2026-01-29

CGA-52r6-w4jx-4r32

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
firefox affected Chainguard firefox —
firefox affected Wolfi firefox —
Upstream advisory

CGA-3gmg-9rq9-3vfp

Open SourceWeaponized exploit2026-01-28

CGA-3gmg-9rq9-3vfp

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

openSUSE-SU-2026:10124-1

Open SourceWeaponized exploit2026-01-30

golang-github-prometheus-prometheus-3.9.1-2.1 on GA media

Affected products

ProductStatusVendorPackageEcosystem
golang-github-prometheus-prometheus affected openSUSE:Tumbleweed golang-github-prometheus-prometheus —
Upstream advisory

GHSA-xxjr-mmjv-4gpg

Open SourceWeaponized exploitMEDIUM2026-01-21

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

Affected products

ProductStatusVendorPackageEcosystem
arangodb-3.11 affected chainguard arangodb-3.11 —
arangodb-3.12 affected chainguard arangodb-3.12 —
argo-workflows-3.6 affected chainguard argo-workflows-3.6 —
argo-workflows-3.7 affected chainguard argo-workflows-3.7 —
argo-workflows-3.7 affected wolfi argo-workflows-3.7 —
drupal-11.3 affected chainguard drupal-11.3 —
foxx-cli affected chainguard foxx-cli —
gitlab-rails-ce-19.0 affected chainguard gitlab-rails-ce-19.0 —
gitlab-rails-ce-19.1 affected chainguard gitlab-rails-ce-19.1 —
gitlab-rails-ce-19.2 affected chainguard gitlab-rails-ce-19.2 —
gitlab-rails-ce-19.3 affected chainguard gitlab-rails-ce-19.3 —
gitlab-rails-ce-fips-18.1 affected chainguard gitlab-rails-ce-fips-18.1 —
gitlab-rails-ce-fips-19.1 affected chainguard gitlab-rails-ce-fips-19.1 —
jitsucom-jitsu affected wolfi jitsucom-jitsu —
jitsucom-jitsu affected chainguard jitsucom-jitsu —
json-server affected chainguard json-server —
json-server affected wolfi json-server —
kibana-8.17 affected chainguard kibana-8.17 —
kibana-8.18 affected chainguard kibana-8.18 —
kibana-8.19 affected chainguard kibana-8.19 —
kibana-9.0 affected chainguard kibana-9.0 —
kibana-9.1 affected chainguard kibana-9.1 —
kibana-9.2 affected chainguard kibana-9.2 —
kubeflow-centraldashboard affected wolfi kubeflow-centraldashboard —
kubeflow-centraldashboard affected chainguard kubeflow-centraldashboard —
kubeflow-katib affected chainguard kubeflow-katib —
kubeflow-katib affected wolfi kubeflow-katib —
kubeflow-pipelines affected wolfi kubeflow-pipelines —
kubeflow-pipelines affected chainguard kubeflow-pipelines —
langfuse-2 affected chainguard langfuse-2 —
langfuse-3 affected wolfi langfuse-3 —
langfuse-3 affected chainguard langfuse-3 —
langfuse-fips-2 affected chainguard langfuse-fips-2 —
langfuse-fips-3 affected chainguard langfuse-fips-3 —
librechat affected chainguard librechat —
lodash affected npm lodash —
lodash affected npm — —
lodash-amd affected npm lodash-amd —
lodash-es affected npm lodash-es —
lodash.unset affected npm lodash.unset —
npm-lodash affected chainguard npm-lodash —
npm-lodash affected wolfi npm-lodash —
opensearch-dashboards-2 affected wolfi opensearch-dashboards-2 —
opensearch-dashboards-2 affected chainguard opensearch-dashboards-2 —
opensearch-dashboards-2-fips affected chainguard opensearch-dashboards-2-fips —
opensearch-dashboards-3 affected chainguard opensearch-dashboards-3 —
opensearch-dashboards-3 affected wolfi opensearch-dashboards-3 —
opensearch-dashboards-3-fips affected chainguard opensearch-dashboards-3-fips —
pelias-api affected chainguard pelias-api —
prism affected wolfi prism —
prism affected chainguard prism —
py3-jupyterlab affected wolfi py3-jupyterlab —
py3-jupyterlab affected chainguard py3-jupyterlab —
redisinsight affected chainguard redisinsight —
renovate affected wolfi renovate —
renovate affected chainguard renovate —
saf affected wolfi saf —
saf affected chainguard saf —
semaphore affected chainguard semaphore —
sqlpad affected wolfi sqlpad —
sqlpad affected chainguard sqlpad —
tensorflow-cpu-jupyter affected chainguard tensorflow-cpu-jupyter —
ts-patch affected wolfi ts-patch —
ts-patch affected chainguard ts-patch —
vitess-22 affected chainguard vitess-22 —
vitess-22 affected wolfi vitess-22 —
vitess-23 affected chainguard vitess-23 —
vitess-23 affected wolfi vitess-23 —
wazuh-dashboard affected chainguard wazuh-dashboard —
wazuh-dashboard-fips affected chainguard wazuh-dashboard-fips —
Upstream advisory

GHSA-xxjr-mmjv-4gpg

GoogleWeaponized exploitMEDIUM2026-01-21

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

Affected products

ProductStatusVendorPackageEcosystem
lodash affected npm lodash —
lodash-amd affected npm lodash-amd —
lodash-es affected npm lodash-es —
lodash.unset affected npm lodash.unset —
Upstream advisory

CGA-gcrx-vjwc-qjh9

Open SourceWeaponized exploit2026-01-29

CGA-gcrx-vjwc-qjh9

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-rw6q-7pg6-c48c

Open SourceWeaponized exploit2026-01-28

CGA-rw6q-7pg6-c48c

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-2rhc-vjcw-w567

Open SourceWeaponized exploit2026-01-29

CGA-2rhc-vjcw-w567

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-7qfc-jc9p-wv4q

Open SourceWeaponized exploit2026-01-28

CGA-7qfc-jc9p-wv4q

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-w8wv-j3xm-vmfg

Open SourceActive exploitation (sightings)2026-01-31

CGA-w8wv-j3xm-vmfg

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
Upstream advisory

openSUSE-SU-2026:20020-1

Open SourceActive exploitation (sightings)CRITICAL2026-01-10

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Leap 16.0 chromium —
Upstream advisory

DSA-6097-1

Open SourceActive exploitation (sightings)2026-01-09

chromium - security update

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
Upstream advisory

openSUSE-SU-2026:10016-1

Open SourceActive exploitation (sightings)2026-01-08

chromedriver-143.0.7499.192-1.1 on GA media

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Tumbleweed chromium —
Upstream advisory

GHSA-rw66-g8v8-wcwh

Open SourceActive exploitation (sightings)HIGH2026-01-07

GHSA-rw66-g8v8-wcwh

Affected products

ProductStatusVendorPackageEcosystem
chromium affected wolfi chromium —
chromium affected chainguard chromium —
Upstream advisory

DEBIAN-CVE-2026-0628

Open SourceActive exploitation (sightings)HIGH2026-01-07

DEBIAN-CVE-2026-0628

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2026-0628

GoogleActive exploitation (sightings)HIGH2026-01-06

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium...

CVEs:CVE-2026-0628

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CGA-hw2f-3xhr-r88w

Open SourceActive exploitation (sightings)2026-01-29

CGA-hw2f-3xhr-r88w

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-rjwc-gq97-q2qp

Open SourceActive exploitation (sightings)2026-01-28

CGA-rjwc-gq97-q2qp

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-6crq-pcpr-mxc6

Open SourceActive exploitation (sightings)2026-01-29

CGA-6crq-pcpr-mxc6

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
mods affected Wolfi mods —
mods affected Chainguard mods —
ollama affected Chainguard ollama —
ollama affected Wolfi ollama —
ollama-cpu affected Wolfi ollama-cpu —
ollama-cpu affected Chainguard ollama-cpu —
ollama-fips affected Chainguard ollama-fips —
Upstream advisory

CGA-wc94-mxff-gfg8

Open SourceActive exploitation (sightings)2026-01-29

CGA-wc94-mxff-gfg8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-f7q4-fjfm-5349

Open SourceActive exploitation (sightings)2026-01-28

CGA-f7q4-fjfm-5349

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-qjwv-vv9f-87mj

Open SourceActive exploitation (sightings)2026-01-29

CGA-qjwv-vv9f-87mj

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-q438-45x9-r4jm

Open SourceActive exploitation (sightings)2026-01-28

CGA-q438-45x9-r4jm

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-fqqg-4h8w-x7gx

Open SourceActive exploitation (sightings)2026-01-29

CGA-fqqg-4h8w-x7gx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-644f-67h6-vf5q

Open SourceActive exploitation (sightings)2026-01-28

CGA-644f-67h6-vf5q

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-mjgx-w34p-grg2

Open SourceActive exploitation (sightings)2026-01-29

CGA-mjgx-w34p-grg2

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-qrww-5xwp-4ch8

Open SourceActive exploitation (sightings)2026-01-28

CGA-qrww-5xwp-4ch8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CVE-2025-36911

Open SourceActive exploitation (sightings)HIGH2026-01-15

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is...

CVEs:CVE-2025-36911

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PUB-A-445196906

GoogleActive exploitation (sightings)MEDIUM2026-01-01

PUB-A-445196906

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CGA-wrgq-pf34-p6m8

Open SourceActive exploitation (sightings)2026-01-29

CGA-wrgq-pf34-p6m8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-rwq7-v9xr-8653

Open SourceActive exploitation (sightings)2026-01-29

CGA-rwq7-v9xr-8653

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-643v-qv4m-7ch4

Open SourceActive exploitation (sightings)2026-01-29

CGA-643v-qv4m-7ch4

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-wccc-f9jw-5pww

Open SourceActive exploitation (sightings)2026-01-28

CGA-wccc-f9jw-5pww

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-m9rw-5q6m-6fr9

Open SourceActive exploitation (sightings)2026-01-29

CGA-m9rw-5q6m-6fr9

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-cjm3-jq6q-x7x3

Open SourceActive exploitation (sightings)2026-01-28

CGA-cjm3-jq6q-x7x3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-4gvv-3jqq-5mr5

Open SourceActive exploitation (sightings)2026-01-29

CGA-4gvv-3jqq-5mr5

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-frmg-22r9-cqmh

Open SourceActive exploitation (sightings)2026-01-28

CGA-frmg-22r9-cqmh

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-9757-28v5-j7rp

Open SourceActive exploitation (sightings)2026-01-29

CGA-9757-28v5-j7rp

Affected products

ProductStatusVendorPackageEcosystem
argo-cd-2.7 affected Wolfi argo-cd-2.7 —
argo-cd-2.7 affected Chainguard argo-cd-2.7 —
argo-cd-2.7-compat affected Chainguard argo-cd-2.7-compat —
argo-cd-2.7-compat affected Wolfi argo-cd-2.7-compat —
argo-cd-2.7-repo-server affected Wolfi argo-cd-2.7-repo-server —
argo-cd-2.7-repo-server affected Chainguard argo-cd-2.7-repo-server —
argo-cd-2.8 affected Chainguard argo-cd-2.8 —
argo-cd-2.8 affected Wolfi argo-cd-2.8 —
argo-cd-2.8-compat affected Wolfi argo-cd-2.8-compat —
argo-cd-2.8-compat affected Chainguard argo-cd-2.8-compat —
argo-cd-2.8-repo-server affected Chainguard argo-cd-2.8-repo-server —
argo-cd-2.8-repo-server affected Wolfi argo-cd-2.8-repo-server —
argo-cd-2.9 affected Chainguard argo-cd-2.9 —
argo-cd-2.9 affected Wolfi argo-cd-2.9 —
argo-cd-2.9-compat affected Wolfi argo-cd-2.9-compat —
argo-cd-2.9-compat affected Chainguard argo-cd-2.9-compat —
argo-cd-2.9-repo-server affected Chainguard argo-cd-2.9-repo-server —
argo-cd-2.9-repo-server affected Wolfi argo-cd-2.9-repo-server —
argo-cd-fips-2.8 affected Chainguard argo-cd-fips-2.8 —
argo-cd-fips-2.8-compat affected Chainguard argo-cd-fips-2.8-compat —
argo-cd-fips-2.8-repo-server affected Chainguard argo-cd-fips-2.8-repo-server —
argo-cd-fips-2.9 affected Chainguard argo-cd-fips-2.9 —
argo-cd-fips-2.9-compat affected Chainguard argo-cd-fips-2.9-compat —
argo-cd-fips-2.9-repo-server affected Chainguard argo-cd-fips-2.9-repo-server —
aws-ebs-csi-driver affected Wolfi aws-ebs-csi-driver —
aws-ebs-csi-driver affected Chainguard aws-ebs-csi-driver —
aws-ebs-csi-driver-1.18 affected Chainguard aws-ebs-csi-driver-1.18 —
aws-ebs-csi-driver-1.19 affected Chainguard aws-ebs-csi-driver-1.19 —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
aws-efs-csi-driver-fips-1.6 affected Chainguard aws-efs-csi-driver-fips-1.6 —
calico affected Chainguard calico —
calico affected Wolfi calico —
calico-apiserver affected Wolfi calico-apiserver —
calico-apiserver affected Chainguard calico-apiserver —
calico-app-policy affected Chainguard calico-app-policy —
calico-app-policy affected Wolfi calico-app-policy —
calico-cni affected Chainguard calico-cni —
calico-cni affected Wolfi calico-cni —
calico-cni-compat affected Chainguard calico-cni-compat —
calico-cni-compat affected Wolfi calico-cni-compat —
calico-cni-fips-3.25-compat affected Chainguard calico-cni-fips-3.25-compat —
calico-cni-fips-compat affected Chainguard calico-cni-fips-compat —
calicoctl affected Wolfi calicoctl —
calicoctl affected Chainguard calicoctl —
calicoctl-fips affected Chainguard calicoctl-fips —
calicoctl-fips-3.25 affected Chainguard calicoctl-fips-3.25 —
calico-felix affected Chainguard calico-felix —
calico-felix affected Wolfi calico-felix —
calico-fips affected Chainguard calico-fips —
calico-fips-3.25 affected Chainguard calico-fips-3.25 —
calico-fips-apiserver affected Chainguard calico-fips-apiserver —
calico-fips-apiserver-3.25 affected Chainguard calico-fips-apiserver-3.25 —
calico-fips-app-policy affected Chainguard calico-fips-app-policy —
calico-fips-app-policy-3.25 affected Chainguard calico-fips-app-policy-3.25 —
calico-fips-cni affected Chainguard calico-fips-cni —
calico-fips-cni-3.25 affected Chainguard calico-fips-cni-3.25 —
calico-fips-felix affected Chainguard calico-fips-felix —
calico-fips-felix-3.25 affected Chainguard calico-fips-felix-3.25 —
calico-fips-key-cert-provisioner affected Chainguard calico-fips-key-cert-provisioner —
calico-fips-kube-controllers affected Chainguard calico-fips-kube-controllers —
calico-fips-kube-controllers-3.25 affected Chainguard calico-fips-kube-controllers-3.25 —
calico-fips-node affected Chainguard calico-fips-node —
calico-fips-node-3.25 affected Chainguard calico-fips-node-3.25 —
calico-fips-pod2daemon affected Chainguard calico-fips-pod2daemon —
calico-fips-pod2daemon-3.25 affected Chainguard calico-fips-pod2daemon-3.25 —
calico-fips-typha-client affected Chainguard calico-fips-typha-client —
calico-fips-typha-client-3.25 affected Chainguard calico-fips-typha-client-3.25 —
calico-fips-typhad affected Chainguard calico-fips-typhad —
calico-fips-typhad-3.25 affected Chainguard calico-fips-typhad-3.25 —
calico-key-cert-provisioner affected Wolfi calico-key-cert-provisioner —
calico-key-cert-provisioner affected Chainguard calico-key-cert-provisioner —
calico-kube-controllers affected Wolfi calico-kube-controllers —
calico-kube-controllers affected Chainguard calico-kube-controllers —
calico-node affected Chainguard calico-node —
calico-node affected Wolfi calico-node —
calico-pod2daemon affected Wolfi calico-pod2daemon —
calico-pod2daemon affected Chainguard calico-pod2daemon —
calico-pod2daemon-flexvol-compat affected Wolfi calico-pod2daemon-flexvol-compat —
calico-pod2daemon-flexvol-compat affected Chainguard calico-pod2daemon-flexvol-compat —
calico-typha-client affected Chainguard calico-typha-client —
calico-typha-client affected Wolfi calico-typha-client —
calico-typhad affected Chainguard calico-typhad —
calico-typhad affected Wolfi calico-typhad —
cluster-autoscaler-1.25 affected Chainguard cluster-autoscaler-1.25 —
cluster-autoscaler-1.25 affected Wolfi cluster-autoscaler-1.25 —
cluster-autoscaler-1.25-compat affected Chainguard cluster-autoscaler-1.25-compat —
cluster-autoscaler-1.25-compat affected Wolfi cluster-autoscaler-1.25-compat —
cluster-autoscaler-fips-1.25 affected Chainguard cluster-autoscaler-fips-1.25 —
cluster-autoscaler-fips-1.25-compat affected Chainguard cluster-autoscaler-fips-1.25-compat —
cluster-autoscaler-fips-1.28 affected Chainguard cluster-autoscaler-fips-1.28 —
cluster-autoscaler-fips-1.28-compat affected Chainguard cluster-autoscaler-fips-1.28-compat —
ip-masq-agent affected Chainguard ip-masq-agent —
ip-masq-agent affected Wolfi ip-masq-agent —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
nodetaint affected Chainguard nodetaint —
nodetaint affected Wolfi nodetaint —
prometheus-adapter affected Chainguard prometheus-adapter —
prometheus-adapter affected Wolfi prometheus-adapter —
sparkctl affected Wolfi sparkctl —
sparkctl affected Chainguard sparkctl —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
Upstream advisory

ECHO-b1e8-a7c2-283a

Open SourceActive exploitation (sightings)2026-01-28

ECHO-b1e8-a7c2-283a

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected k8s.io k8s.io/kubernetes —
Upstream advisory

CGA-pp28-cm29-q36g

Open SourceActive exploitation (sightings)2026-01-28

CGA-pp28-cm29-q36g

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
Upstream advisory

CGA-f7gm-j25v-gh6w

Open SourceActive exploitation (sightings)2026-01-28

CGA-f7gm-j25v-gh6w

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
Upstream advisory

CGA-rwhp-7x8q-xj8j

GoogleActive exploitation (sightings)2026-01-29

CGA-rwhp-7x8q-xj8j

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-j9v6-fcpf-fhrq

GoogleActive exploitation (sightings)2026-01-28

CGA-j9v6-fcpf-fhrq

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

ECHO-8a09-0079-b4fa

Open SourceActive exploitation (sightings)2026-01-28

ECHO-8a09-0079-b4fa

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected k8s.io k8s.io/kubernetes —
Upstream advisory

CGA-w2f2-f9fv-696m

Open SourceActive exploitation (sightings)2026-01-28

CGA-w2f2-f9fv-696m

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
Upstream advisory

CGA-qv2r-m637-rw2f

Open SourceActive exploitation (sightings)2026-01-10

CGA-qv2r-m637-rw2f

Affected products

ProductStatusVendorPackageEcosystem
argocd-image-updater affected Wolfi argocd-image-updater —
argocd-image-updater affected Chainguard argocd-image-updater —
argocd-image-updater-fips affected Chainguard argocd-image-updater-fips —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
gpu-feature-discovery affected Chainguard gpu-feature-discovery —
gpu-feature-discovery affected Wolfi gpu-feature-discovery —
ip-masq-agent affected Chainguard ip-masq-agent —
ip-masq-agent affected Wolfi ip-masq-agent —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
local-static-provisioner affected Wolfi local-static-provisioner —
local-static-provisioner affected Chainguard local-static-provisioner —
local-static-provisioner-compat affected Chainguard local-static-provisioner-compat —
local-static-provisioner-compat affected Wolfi local-static-provisioner-compat —
local-static-provisioner-fips affected Chainguard local-static-provisioner-fips —
local-static-provisioner-fips-compat affected Chainguard local-static-provisioner-fips-compat —
local-volume-node-cleanup affected Wolfi local-volume-node-cleanup —
local-volume-node-cleanup affected Chainguard local-volume-node-cleanup —
local-volume-node-cleanup-compat affected Wolfi local-volume-node-cleanup-compat —
local-volume-node-cleanup-compat affected Chainguard local-volume-node-cleanup-compat —
local-volume-node-cleanup-fips affected Chainguard local-volume-node-cleanup-fips —
local-volume-node-cleanup-fips-compat affected Chainguard local-volume-node-cleanup-fips-compat —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
rancher-webhook-0.4 affected Chainguard rancher-webhook-0.4 —
rancher-webhook-fips-0.4 affected Chainguard rancher-webhook-fips-0.4 —
rancher-webhook-fips-0.5 affected Chainguard rancher-webhook-fips-0.5 —
Upstream advisory

CGA-73pm-7j6q-74x4

Open SourceActive exploitation (sightings)2026-01-29

CGA-73pm-7j6q-74x4

Affected products

ProductStatusVendorPackageEcosystem
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
nodetaint affected Chainguard nodetaint —
nodetaint affected Wolfi nodetaint —
sparkctl affected Wolfi sparkctl —
sparkctl affected Chainguard sparkctl —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
Upstream advisory

CGA-cf3q-mxj7-w272

Open SourceActive exploitation (sightings)2026-01-28

CGA-cf3q-mxj7-w272

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

RHSA-2026:1249

Open SourceActive exploitation (sightings)HIGH2026-01-26

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Affected products

ProductStatusVendorPackageEcosystem
automation-controller-venv-tower affected Red Hat:ansible_automation_platform:2.6::el9 automation-controller-venv-tower —
automation-controller-venv-tower affected Red Hat:ansible_automation_platform_developer:2.6::el9 automation-controller-venv-tower —
python3.11-django affected Red Hat:ansible_automation_platform_developer:2.6::el9 python3.11-django —
python3.11-django affected Red Hat:ansible_automation_platform:2.6::el9 python3.11-django —
python3.11-protobuf affected Red Hat:ansible_automation_platform:2.6::el9 python3.11-protobuf —
python3.11-protobuf-debuginfo affected Red Hat:ansible_automation_platform:2.6::el9 python3.11-protobuf-debuginfo —
python3.11-protobuf-debugsource affected Red Hat:ansible_automation_platform:2.6::el9 python3.11-protobuf-debugsource —
python3.11-urllib3 affected Red Hat:ansible_automation_platform_developer:2.6::el9 python3.11-urllib3 —
python3.11-urllib3 affected Red Hat:ansible_automation_platform:2.6::el9 python3.11-urllib3 —
receptor affected Red Hat:ansible_automation_platform:2.6::el10 receptor —
receptor affected Red Hat:ansible_automation_platform_developer:2.6::el9 receptor —
receptor affected Red Hat:ansible_automation_platform_inside:2.6::el9 receptor —
receptor affected Red Hat:ansible_automation_platform:2.6::el9 receptor —
Upstream advisory

CGA-r5w5-xmq4-v7jm

GoogleActive exploitation (sightings)2026-01-29

CGA-r5w5-xmq4-v7jm

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-2rh8-vhwq-m8fm

GoogleActive exploitation (sightings)2026-01-28

CGA-2rh8-vhwq-m8fm

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-rhh3-crpc-g9f3

Open SourceActive exploitation (sightings)2026-01-28

CGA-rhh3-crpc-g9f3

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.31 affected Chainguard kubeadm-1.31 —
kubeadm-1.31-default affected Chainguard kubeadm-1.31-default —
kube-apiserver-1.31 affected Chainguard kube-apiserver-1.31 —
kube-apiserver-1.31-default affected Chainguard kube-apiserver-1.31-default —
kube-controller-manager-1.31 affected Chainguard kube-controller-manager-1.31 —
kube-controller-manager-1.31-default affected Chainguard kube-controller-manager-1.31-default —
kubectl-1.31 affected Chainguard kubectl-1.31 —
kubectl-1.31-bitnami-compat affected Chainguard kubectl-1.31-bitnami-compat —
kubectl-1.31-default affected Chainguard kubectl-1.31-default —
kubectl-bash-completion-1.31 affected Chainguard kubectl-bash-completion-1.31 —
kubelet-1.31 affected Chainguard kubelet-1.31 —
kubelet-1.31-default affected Chainguard kubelet-1.31-default —
kube-proxy-1.31 affected Chainguard kube-proxy-1.31 —
kube-proxy-1.31-default affected Chainguard kube-proxy-1.31-default —
kube-proxy-1.31-default-compat affected Chainguard kube-proxy-1.31-default-compat —
kubernetes-1.31 affected Chainguard kubernetes-1.31 —
kubernetes-1.31-default affected Chainguard kubernetes-1.31-default —
kubernetes-pause-1.31 affected Chainguard kubernetes-pause-1.31 —
kubernetes-pause-compat-1.31 affected Chainguard kubernetes-pause-compat-1.31 —
kube-scheduler-1.31 affected Chainguard kube-scheduler-1.31 —
kube-scheduler-1.31-default affected Chainguard kube-scheduler-1.31-default —
Upstream advisory

CGA-q2pf-fhcg-gf46

Open SourceActive exploitation (sightings)2026-01-28

CGA-q2pf-fhcg-gf46

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-bitnami-compat affected Chainguard kubectl-1.28-bitnami-compat —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kube-proxy-1.28-default-compat affected Chainguard kube-proxy-1.28-default-compat —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kubernetes-pause-1.28 affected Chainguard kubernetes-pause-1.28 —
kubernetes-pause-compat-1.28 affected Chainguard kubernetes-pause-compat-1.28 —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-hcqx-mjwp-pg7x

Open SourceActive exploitation (sightings)2026-01-28

CGA-hcqx-mjwp-pg7x

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.32 affected Chainguard kubeadm-1.32 —
kubeadm-1.32 affected Wolfi kubeadm-1.32 —
kubeadm-1.32-default affected Chainguard kubeadm-1.32-default —
kubeadm-1.32-default affected Wolfi kubeadm-1.32-default —
kube-apiserver-1.32 affected Wolfi kube-apiserver-1.32 —
kube-apiserver-1.32 affected Chainguard kube-apiserver-1.32 —
kube-apiserver-1.32-default affected Chainguard kube-apiserver-1.32-default —
kube-apiserver-1.32-default affected Wolfi kube-apiserver-1.32-default —
kube-controller-manager-1.32 affected Chainguard kube-controller-manager-1.32 —
kube-controller-manager-1.32 affected Wolfi kube-controller-manager-1.32 —
kube-controller-manager-1.32-default affected Chainguard kube-controller-manager-1.32-default —
kube-controller-manager-1.32-default affected Wolfi kube-controller-manager-1.32-default —
kubectl-1.32 affected Wolfi kubectl-1.32 —
kubectl-1.32 affected Chainguard kubectl-1.32 —
kubectl-1.32-bitnami-compat affected Chainguard kubectl-1.32-bitnami-compat —
kubectl-1.32-bitnami-compat affected Wolfi kubectl-1.32-bitnami-compat —
kubectl-1.32-default affected Wolfi kubectl-1.32-default —
kubectl-1.32-default affected Chainguard kubectl-1.32-default —
kubectl-bash-completion-1.32 affected Chainguard kubectl-bash-completion-1.32 —
kubectl-bash-completion-1.32 affected Wolfi kubectl-bash-completion-1.32 —
kubelet-1.32 affected Wolfi kubelet-1.32 —
kubelet-1.32 affected Chainguard kubelet-1.32 —
kubelet-1.32-default affected Chainguard kubelet-1.32-default —
kubelet-1.32-default affected Wolfi kubelet-1.32-default —
kube-proxy-1.32 affected Chainguard kube-proxy-1.32 —
kube-proxy-1.32 affected Wolfi kube-proxy-1.32 —
kube-proxy-1.32-default affected Chainguard kube-proxy-1.32-default —
kube-proxy-1.32-default affected Wolfi kube-proxy-1.32-default —
kube-proxy-1.32-default-compat affected Chainguard kube-proxy-1.32-default-compat —
kube-proxy-1.32-default-compat affected Wolfi kube-proxy-1.32-default-compat —
kubernetes-1.32 affected Wolfi kubernetes-1.32 —
kubernetes-1.32 affected Chainguard kubernetes-1.32 —
kubernetes-1.32-default affected Chainguard kubernetes-1.32-default —
kubernetes-1.32-default affected Wolfi kubernetes-1.32-default —
kubernetes-pause-1.32 affected Wolfi kubernetes-pause-1.32 —
kubernetes-pause-1.32 affected Chainguard kubernetes-pause-1.32 —
kubernetes-pause-compat-1.32 affected Chainguard kubernetes-pause-compat-1.32 —
kubernetes-pause-compat-1.32 affected Wolfi kubernetes-pause-compat-1.32 —
kube-scheduler-1.32 affected Chainguard kube-scheduler-1.32 —
kube-scheduler-1.32 affected Wolfi kube-scheduler-1.32 —
kube-scheduler-1.32-default affected Wolfi kube-scheduler-1.32-default —
kube-scheduler-1.32-default affected Chainguard kube-scheduler-1.32-default —
Upstream advisory

CGA-g266-3j73-cp46

Open SourceActive exploitation (sightings)2026-01-28

CGA-g266-3j73-cp46

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
Upstream advisory

CGA-c3hq-6hqh-892g

Open SourceActive exploitation (sightings)2026-01-28

CGA-c3hq-6hqh-892g

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
Upstream advisory

CGA-3hx7-fq2f-xgf9

Open SourceActive exploitation (sightings)2026-01-28

CGA-3hx7-fq2f-xgf9

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

MINI-6g58-rxpp-4g8h

Open SourceActive exploitation (sightings)2026-01-18

MINI-6g58-rxpp-4g8h

Affected products

ProductStatusVendorPackageEcosystem
kube-apiserver-fips-1.35 affected MinimOS kube-apiserver-fips-1.35 —
kube-apiserver-fips-1.35-compat affected MinimOS kube-apiserver-fips-1.35-compat —
kube-controller-manager-fips-1.35 affected MinimOS kube-controller-manager-fips-1.35 —
kube-controller-manager-fips-1.35-compat affected MinimOS kube-controller-manager-fips-1.35-compat —
kubectl-fips-1.35 affected MinimOS kubectl-fips-1.35 —
kubectl-fips-1.35-compat affected MinimOS kubectl-fips-1.35-compat —
kube-proxy-fips-1.35 affected MinimOS kube-proxy-fips-1.35 —
kube-proxy-fips-1.35-compat affected MinimOS kube-proxy-fips-1.35-compat —
kubernetes-fips-1.35 affected MinimOS kubernetes-fips-1.35 —
kube-scheduler-fips-1.35 affected MinimOS kube-scheduler-fips-1.35 —
kube-scheduler-fips-1.35-compat affected MinimOS kube-scheduler-fips-1.35-compat —
Upstream advisory

MINI-gfj7-c6gh-425c

Open SourceActive exploitation (sightings)2026-01-12

MINI-gfj7-c6gh-425c

Affected products

ProductStatusVendorPackageEcosystem
kube-apiserver-1.35 affected MinimOS kube-apiserver-1.35 —
kube-apiserver-1.35-compat affected MinimOS kube-apiserver-1.35-compat —
kube-controller-manager-1.35 affected MinimOS kube-controller-manager-1.35 —
kube-controller-manager-1.35-compat affected MinimOS kube-controller-manager-1.35-compat —
kubectl-1.35 affected MinimOS kubectl-1.35 —
kubectl-1.35-advanced-compat affected MinimOS kubectl-1.35-advanced-compat —
kubectl-1.35-compat affected MinimOS kubectl-1.35-compat —
kube-proxy-1.35 affected MinimOS kube-proxy-1.35 —
kube-proxy-1.35-compat affected MinimOS kube-proxy-1.35-compat —
kubernetes-1.35 affected MinimOS kubernetes-1.35 —
kube-scheduler-1.35 affected MinimOS kube-scheduler-1.35 —
kube-scheduler-1.35-compat affected MinimOS kube-scheduler-1.35-compat —
Upstream advisory

CGA-x76m-pwj8-ghjm

Open SourceActive exploitation (sightings)2026-01-07

CGA-x76m-pwj8-ghjm

Affected products

ProductStatusVendorPackageEcosystem
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28 affected Wolfi kubernetes-1.28 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.30 affected Wolfi kubernetes-1.30 —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.31 affected Chainguard kubernetes-1.31 —
kubernetes-1.31 affected Wolfi kubernetes-1.31 —
kubernetes-1.32 affected Wolfi kubernetes-1.32 —
kubernetes-1.32 affected Chainguard kubernetes-1.32 —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
nodetaint affected Chainguard nodetaint —
nodetaint affected Wolfi nodetaint —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
Upstream advisory

CGA-h9fw-h4mq-cf8j

Open SourceActive exploitation (sightings)2026-01-29

CGA-h9fw-h4mq-cf8j

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-c87f-rgj5-f9r7

Open SourceActive exploitation (sightings)2026-01-28

CGA-c87f-rgj5-f9r7

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-f277-873v-56j8

Open SourceActive exploitation (sightings)2026-01-29

CGA-f277-873v-56j8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-94fj-h4pg-8h3x

Open SourceActive exploitation (sightings)2026-01-28

CGA-94fj-h4pg-8h3x

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-v27m-842c-f4w6

GoogleActive exploitation (sightings)2026-01-29

CGA-v27m-842c-f4w6

Affected products

ProductStatusVendorPackageEcosystem
elasticsearch-8 affected Chainguard elasticsearch-8 —
elasticsearch-8-bitnami affected Chainguard elasticsearch-8-bitnami —
elasticsearch-8-config affected Chainguard elasticsearch-8-config —
elasticsearch-8-iamguarded affected Chainguard elasticsearch-8-iamguarded —
elasticsearch-config affected Chainguard elasticsearch-config —
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-xfg9-fw7r-q352

GoogleActive exploitation (sightings)2026-01-28

CGA-xfg9-fw7r-q352

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-f469-m76h-hjx3

Open SourceActive exploitation (sightings)2026-01-29

CGA-f469-m76h-hjx3

Affected products

ProductStatusVendorPackageEcosystem
cloudflared affected Wolfi cloudflared —
cloudflared affected Chainguard cloudflared —
coredns affected Wolfi coredns —
coredns affected Chainguard coredns —
coredns-compat affected Chainguard coredns-compat —
coredns-compat affected Wolfi coredns-compat —
coredns-fips affected Chainguard coredns-fips —
eks-distro-1.29 affected Chainguard eks-distro-1.29 —
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-1.33 affected Chainguard eks-distro-1.33 —
eks-distro-coredns-1.29 affected Chainguard eks-distro-coredns-1.29 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-1.33 affected Chainguard eks-distro-coredns-1.33 —
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-coredns-fips-1.31 affected Chainguard eks-distro-coredns-fips-1.31 —
eks-distro-coredns-fips-1.32 affected Chainguard eks-distro-coredns-fips-1.32 —
eks-distro-coredns-fips-1.33 affected Chainguard eks-distro-coredns-fips-1.33 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-fips-1.31 affected Chainguard eks-distro-fips-1.31 —
eks-distro-fips-1.32 affected Chainguard eks-distro-fips-1.32 —
eks-distro-fips-1.33 affected Chainguard eks-distro-fips-1.33 —
eks-distro-kube-apiserver-1.29 affected Chainguard eks-distro-kube-apiserver-1.29 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-1.33 affected Chainguard eks-distro-kube-apiserver-1.33 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-apiserver-fips-1.31 affected Chainguard eks-distro-kube-apiserver-fips-1.31 —
eks-distro-kube-apiserver-fips-1.32 affected Chainguard eks-distro-kube-apiserver-fips-1.32 —
eks-distro-kube-apiserver-fips-1.33 affected Chainguard eks-distro-kube-apiserver-fips-1.33 —
eks-distro-kube-controller-manager-1.29 affected Chainguard eks-distro-kube-controller-manager-1.29 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-1.33 affected Chainguard eks-distro-kube-controller-manager-1.33 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.31 affected Chainguard eks-distro-kube-controller-manager-fips-1.31 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-controller-manager-fips-1.33 affected Chainguard eks-distro-kube-controller-manager-fips-1.33 —
eks-distro-kube-proxy-1.29 affected Chainguard eks-distro-kube-proxy-1.29 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-1.32 affected Chainguard eks-distro-kube-proxy-1.32 —
eks-distro-kube-proxy-1.33 affected Chainguard eks-distro-kube-proxy-1.33 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-proxy-fips-1.31 affected Chainguard eks-distro-kube-proxy-fips-1.31 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kube-proxy-fips-1.33 affected Chainguard eks-distro-kube-proxy-fips-1.33 —
eks-distro-kubernetes-pause-1.29 affected Chainguard eks-distro-kubernetes-pause-1.29 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kubernetes-pause-1.32 affected Chainguard eks-distro-kubernetes-pause-1.32 —
eks-distro-kubernetes-pause-1.33 affected Chainguard eks-distro-kubernetes-pause-1.33 —
eks-distro-kube-scheduler-1.29 affected Chainguard eks-distro-kube-scheduler-1.29 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-1.33 affected Chainguard eks-distro-kube-scheduler-1.33 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
eks-distro-kube-scheduler-fips-1.31 affected Chainguard eks-distro-kube-scheduler-fips-1.31 —
eks-distro-kube-scheduler-fips-1.32 affected Chainguard eks-distro-kube-scheduler-fips-1.32 —
eks-distro-kube-scheduler-fips-1.33 affected Chainguard eks-distro-kube-scheduler-fips-1.33 —
juicefs-1.2 affected Chainguard juicefs-1.2 —
juicefs-1.2-compat affected Chainguard juicefs-1.2-compat —
juicefs-1.3 affected Wolfi juicefs-1.3 —
juicefs-1.3 affected Chainguard juicefs-1.3 —
juicefs-1.3-compat affected Wolfi juicefs-1.3-compat —
juicefs-1.3-compat affected Chainguard juicefs-1.3-compat —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
kuma-coredns affected Wolfi kuma-coredns —
kuma-coredns affected Chainguard kuma-coredns —
Upstream advisory

ECHO-0a0b-4338-02ac

Open SourceActive exploitation (sightings)2026-01-28

ECHO-0a0b-4338-02ac

Affected products

ProductStatusVendorPackageEcosystem
istio affected istio.io istio.io/istio —
Upstream advisory

CGA-x9v9-63rj-wwj5

Open SourceActive exploitation (sightings)2026-01-28

CGA-x9v9-63rj-wwj5

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
Upstream advisory

CGA-qhc4-4689-wcqh

Open SourceActive exploitation (sightings)2026-01-28

CGA-qhc4-4689-wcqh

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
Upstream advisory

CGA-r5ph-5hg8-q29c

Open SourceActive exploitation (sightings)2026-01-28

CGA-r5ph-5hg8-q29c

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
Upstream advisory

CGA-mw7h-2mpq-wrvp

Open SourceActive exploitation (sightings)2026-01-28

CGA-mw7h-2mpq-wrvp

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-cni-1.21-compat affected Wolfi istio-cni-1.21-compat —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21 affected Wolfi istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
istio-install-cni-1.21-compat affected Wolfi istio-install-cni-1.21-compat —
Upstream advisory

CGA-mf6r-534h-mmxm

Open SourceActive exploitation (sightings)2026-01-28

CGA-mf6r-534h-mmxm

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
Upstream advisory

CGA-cmw2-w47x-437c

Open SourceActive exploitation (sightings)2026-01-28

CGA-cmw2-w47x-437c

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

CGA-gcp2-3r9q-xmc3

Open SourceActive exploitation (sightings)2026-01-28

CGA-gcp2-3r9q-xmc3

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-7mjv-pr9m-hjj9

Open SourceActive exploitation (sightings)2026-01-28

CGA-7mjv-pr9m-hjj9

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-768c-m6m7-9vwc

Open SourceActive exploitation (sightings)2026-01-28

CGA-768c-m6m7-9vwc

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
Upstream advisory

CGA-55rm-hr69-g5jx

Open SourceActive exploitation (sightings)2026-01-28

CGA-55rm-hr69-g5jx

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.22 affected Chainguard istio-cni-1.22 —
istio-cni-1.22 affected Wolfi istio-cni-1.22 —
istio-cni-1.22-compat affected Chainguard istio-cni-1.22-compat —
istio-cni-1.22-compat affected Wolfi istio-cni-1.22-compat —
istio-install-cni-1.22 affected Chainguard istio-install-cni-1.22 —
istio-install-cni-1.22 affected Wolfi istio-install-cni-1.22 —
istio-install-cni-1.22-compat affected Chainguard istio-install-cni-1.22-compat —
istio-install-cni-1.22-compat affected Wolfi istio-install-cni-1.22-compat —
Upstream advisory

CGA-54fh-6xgf-j8m3

Open SourceActive exploitation (sightings)2026-01-28

CGA-54fh-6xgf-j8m3

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-4j4r-92ff-x9vx

Open SourceActive exploitation (sightings)2026-01-28

CGA-4j4r-92ff-x9vx

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-3x64-823j-w579

Open SourceActive exploitation (sightings)2026-01-28

CGA-3x64-823j-w579

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
Upstream advisory

CGA-3rwm-q482-5v3c

Open SourceActive exploitation (sightings)2026-01-28

CGA-3rwm-q482-5v3c

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
Upstream advisory

CGA-w3mj-56r9-cfqx

Open SourceActive exploitation (sightings)2026-01-12

CGA-w3mj-56r9-cfqx

Affected products

ProductStatusVendorPackageEcosystem
cert-manager-istio-csr affected Chainguard cert-manager-istio-csr —
cert-manager-istio-csr affected Wolfi cert-manager-istio-csr —
cert-manager-istio-csr-compat affected Wolfi cert-manager-istio-csr-compat —
cert-manager-istio-csr-compat affected Chainguard cert-manager-istio-csr-compat —
cert-manager-istio-csr-compat-fips affected Chainguard cert-manager-istio-csr-compat-fips —
cert-manager-istio-csr-fips affected Chainguard cert-manager-istio-csr-fips —
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-cni-1.21-compat affected Wolfi istio-cni-1.21-compat —
istio-cni-1.22 affected Chainguard istio-cni-1.22 —
istio-cni-1.22 affected Wolfi istio-cni-1.22 —
istio-cni-1.22-compat affected Chainguard istio-cni-1.22-compat —
istio-cni-1.22-compat affected Wolfi istio-cni-1.22-compat —
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21 affected Wolfi istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
istio-install-cni-1.21-compat affected Wolfi istio-install-cni-1.21-compat —
istio-install-cni-1.22 affected Wolfi istio-install-cni-1.22 —
istio-install-cni-1.22 affected Chainguard istio-install-cni-1.22 —
istio-install-cni-1.22-compat affected Chainguard istio-install-cni-1.22-compat —
istio-install-cni-1.22-compat affected Wolfi istio-install-cni-1.22-compat —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

ECHO-7c50-890f-3b0c

Open SourceActive exploitation (sightings)2026-01-28

ECHO-7c50-890f-3b0c

Affected products

ProductStatusVendorPackageEcosystem
istio affected istio.io istio.io/istio —
Upstream advisory

CGA-x2f7-f8jw-6crf

Open SourceActive exploitation (sightings)2026-01-28

CGA-x2f7-f8jw-6crf

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
Upstream advisory

CGA-x25g-gp3c-5phc

Open SourceActive exploitation (sightings)2026-01-28

CGA-x25g-gp3c-5phc

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-wq9r-7f7w-h375

Open SourceActive exploitation (sightings)2026-01-28

CGA-wq9r-7f7w-h375

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
Upstream advisory

CGA-vw2f-g95m-3cpr

Open SourceActive exploitation (sightings)2026-01-28

CGA-vw2f-g95m-3cpr

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
Upstream advisory

CGA-rqrw-4h3w-j2qw

Open SourceActive exploitation (sightings)2026-01-28

CGA-rqrw-4h3w-j2qw

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
Upstream advisory

CGA-r545-q28h-5x7f

Open SourceActive exploitation (sightings)2026-01-28

CGA-r545-q28h-5x7f

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
Upstream advisory

CGA-q7pc-wj96-h86j

Open SourceActive exploitation (sightings)2026-01-28

CGA-q7pc-wj96-h86j

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.22 affected Chainguard istio-cni-1.22 —
istio-cni-1.22 affected Wolfi istio-cni-1.22 —
istio-cni-1.22-compat affected Chainguard istio-cni-1.22-compat —
istio-cni-1.22-compat affected Wolfi istio-cni-1.22-compat —
istio-install-cni-1.22 affected Chainguard istio-install-cni-1.22 —
istio-install-cni-1.22 affected Wolfi istio-install-cni-1.22 —
istio-install-cni-1.22-compat affected Chainguard istio-install-cni-1.22-compat —
istio-install-cni-1.22-compat affected Wolfi istio-install-cni-1.22-compat —
Upstream advisory

CGA-p9rh-qw8g-98pg

Open SourceActive exploitation (sightings)2026-01-28

CGA-p9rh-qw8g-98pg

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-hjp5-xxj3-65xx

Open SourceActive exploitation (sightings)2026-01-28

CGA-hjp5-xxj3-65xx

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-cq3m-3vg2-6jxj

Open SourceActive exploitation (sightings)2026-01-28

CGA-cq3m-3vg2-6jxj

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-7fpx-gx27-pggp

Open SourceActive exploitation (sightings)2026-01-28

CGA-7fpx-gx27-pggp

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
Upstream advisory

CGA-6vwp-43hr-5gcj

Open SourceActive exploitation (sightings)2026-01-28

CGA-6vwp-43hr-5gcj

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-cni-1.21-compat affected Wolfi istio-cni-1.21-compat —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21 affected Wolfi istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Wolfi istio-install-cni-1.21-compat —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
Upstream advisory

CGA-2g55-f2pj-qp7j

Open SourceActive exploitation (sightings)2026-01-28

CGA-2g55-f2pj-qp7j

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

CGA-2wj5-vhh8-fgjm

Open SourceActive exploitation (sightings)2026-01-28

CGA-2wj5-vhh8-fgjm

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
Upstream advisory

CGA-j3x2-jrvx-g3j4

Open SourceActive exploitation (sightings)2026-01-12

CGA-j3x2-jrvx-g3j4

Affected products

ProductStatusVendorPackageEcosystem
cert-manager-istio-csr affected Wolfi cert-manager-istio-csr —
cert-manager-istio-csr affected Chainguard cert-manager-istio-csr —
cert-manager-istio-csr-compat affected Wolfi cert-manager-istio-csr-compat —
cert-manager-istio-csr-compat affected Chainguard cert-manager-istio-csr-compat —
cert-manager-istio-csr-compat-fips affected Chainguard cert-manager-istio-csr-compat-fips —
cert-manager-istio-csr-fips affected Chainguard cert-manager-istio-csr-fips —
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-cni-1.21-compat affected Wolfi istio-cni-1.21-compat —
istio-cni-1.22 affected Chainguard istio-cni-1.22 —
istio-cni-1.22 affected Wolfi istio-cni-1.22 —
istio-cni-1.22-compat affected Chainguard istio-cni-1.22-compat —
istio-cni-1.22-compat affected Wolfi istio-cni-1.22-compat —
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-1.21 affected Wolfi istio-install-cni-1.21 —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Wolfi istio-install-cni-1.21-compat —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
istio-install-cni-1.22 affected Chainguard istio-install-cni-1.22 —
istio-install-cni-1.22 affected Wolfi istio-install-cni-1.22 —
istio-install-cni-1.22-compat affected Chainguard istio-install-cni-1.22-compat —
istio-install-cni-1.22-compat affected Wolfi istio-install-cni-1.22-compat —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

CGA-5734-mp6g-89rh

Open SourceActive exploitation (sightings)2026-01-29

CGA-5734-mp6g-89rh

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-89rr-3ph7-4h74

Open SourceActive exploitation (sightings)2026-01-28

CGA-89rr-3ph7-4h74

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-43q2-g65h-c2fx

Open SourceActive exploitation (sightings)2026-01-29

CGA-43q2-g65h-c2fx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-w49p-v79w-xx88

Open SourceActive exploitation (sightings)2026-01-28

CGA-w49p-v79w-xx88

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
Upstream advisory

CGA-p3v9-jj24-6h9w

Open SourceActive exploitation (sightings)2026-01-29

CGA-p3v9-jj24-6h9w

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-r5rv-89v9-qj64

Open SourceActive exploitation (sightings)2026-01-28

CGA-r5rv-89v9-qj64

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-5qjm-gjfh-jwcx

Open SourceActive exploitation (sightings)2026-01-29

CGA-5qjm-gjfh-jwcx

Affected products

ProductStatusVendorPackageEcosystem
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.12-acmesolver affected Chainguard cert-manager-1.12-acmesolver —
cert-manager-1.12-acmesolver affected Wolfi cert-manager-1.12-acmesolver —
cert-manager-1.12-cainjector affected Chainguard cert-manager-1.12-cainjector —
cert-manager-1.12-cainjector affected Wolfi cert-manager-1.12-cainjector —
cert-manager-1.12-controller affected Chainguard cert-manager-1.12-controller —
cert-manager-1.12-controller affected Wolfi cert-manager-1.12-controller —
cert-manager-1.12-webhook affected Wolfi cert-manager-1.12-webhook —
cert-manager-1.12-webhook affected Chainguard cert-manager-1.12-webhook —
cert-manager-1.13 affected Chainguard cert-manager-1.13 —
cert-manager-1.13 affected Wolfi cert-manager-1.13 —
cert-manager-1.13-acmesolver affected Wolfi cert-manager-1.13-acmesolver —
cert-manager-1.13-acmesolver affected Chainguard cert-manager-1.13-acmesolver —
cert-manager-1.13-cainjector affected Chainguard cert-manager-1.13-cainjector —
cert-manager-1.13-cainjector affected Wolfi cert-manager-1.13-cainjector —
cert-manager-1.13-controller affected Chainguard cert-manager-1.13-controller —
cert-manager-1.13-controller affected Wolfi cert-manager-1.13-controller —
cert-manager-1.13-webhook affected Wolfi cert-manager-1.13-webhook —
cert-manager-1.13-webhook affected Chainguard cert-manager-1.13-webhook —
cert-manager-1.14 affected Wolfi cert-manager-1.14 —
cert-manager-1.14 affected Chainguard cert-manager-1.14 —
cert-manager-1.14-acmesolver affected Chainguard cert-manager-1.14-acmesolver —
cert-manager-1.14-acmesolver affected Wolfi cert-manager-1.14-acmesolver —
cert-manager-1.14-cainjector affected Wolfi cert-manager-1.14-cainjector —
cert-manager-1.14-cainjector affected Chainguard cert-manager-1.14-cainjector —
cert-manager-1.14-controller affected Wolfi cert-manager-1.14-controller —
cert-manager-1.14-controller affected Chainguard cert-manager-1.14-controller —
cert-manager-1.14-startupapicheck affected Chainguard cert-manager-1.14-startupapicheck —
cert-manager-1.14-webhook affected Wolfi cert-manager-1.14-webhook —
cert-manager-1.14-webhook affected Chainguard cert-manager-1.14-webhook —
cert-manager-acmesolver-1.12 affected Chainguard cert-manager-acmesolver-1.12 —
cert-manager-acmesolver-1.12-bitnami-compat affected Chainguard cert-manager-acmesolver-1.12-bitnami-compat —
cert-manager-acmesolver-1.12-iamguarded-compat affected Chainguard cert-manager-acmesolver-1.12-iamguarded-compat —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-1.12 affected Chainguard cert-manager-cainjector-1.12 —
cert-manager-cainjector-1.12-bitnami-compat affected Chainguard cert-manager-cainjector-1.12-bitnami-compat —
cert-manager-cainjector-1.12-iamguarded-compat affected Chainguard cert-manager-cainjector-1.12-iamguarded-compat —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-controller-1.12 affected Chainguard cert-manager-controller-1.12 —
cert-manager-controller-1.12-bitnami-compat affected Chainguard cert-manager-controller-1.12-bitnami-compat —
cert-manager-controller-1.12-iamguarded-compat affected Chainguard cert-manager-controller-1.12-iamguarded-compat —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-fips-1.13 affected Chainguard cert-manager-fips-1.13 —
cert-manager-fips-1.13-acmesolver affected Chainguard cert-manager-fips-1.13-acmesolver —
cert-manager-fips-1.13-cainjector affected Chainguard cert-manager-fips-1.13-cainjector —
cert-manager-fips-1.13-cmctl affected Chainguard cert-manager-fips-1.13-cmctl —
cert-manager-fips-1.13-controller affected Chainguard cert-manager-fips-1.13-controller —
cert-manager-fips-1.13-webhook affected Chainguard cert-manager-fips-1.13-webhook —
cert-manager-fips-1.14 affected Chainguard cert-manager-fips-1.14 —
cert-manager-fips-1.14-acmesolver affected Chainguard cert-manager-fips-1.14-acmesolver —
cert-manager-fips-1.14-cainjector affected Chainguard cert-manager-fips-1.14-cainjector —
cert-manager-fips-1.14-cmctl affected Chainguard cert-manager-fips-1.14-cmctl —
cert-manager-fips-1.14-controller affected Chainguard cert-manager-fips-1.14-controller —
cert-manager-fips-1.14-startupapicheck affected Chainguard cert-manager-fips-1.14-startupapicheck —
cert-manager-fips-1.14-webhook affected Chainguard cert-manager-fips-1.14-webhook —
cert-manager-webhook-1.12 affected Chainguard cert-manager-webhook-1.12 —
cert-manager-webhook-1.12-bitnami-compat affected Chainguard cert-manager-webhook-1.12-bitnami-compat —
cert-manager-webhook-1.12-iamguarded-compat affected Chainguard cert-manager-webhook-1.12-iamguarded-compat —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
chartmuseum affected Chainguard chartmuseum —
chartmuseum affected Wolfi chartmuseum —
cilium-cli affected Wolfi cilium-cli —
cilium-cli affected Chainguard cilium-cli —
cmctl-1.12 affected Wolfi cmctl-1.12 —
cmctl-1.12 affected Chainguard cmctl-1.12 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-1.13 affected Wolfi cmctl-1.13 —
cmctl-1.13 affected Chainguard cmctl-1.13 —
cmctl-1.13-fips affected Chainguard cmctl-1.13-fips —
cmctl-1.14 affected Chainguard cmctl-1.14 —
cmctl-1.14 affected Wolfi cmctl-1.14 —
cmctl-1.14-fips affected Chainguard cmctl-1.14-fips —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
eksctl affected Wolfi eksctl —
eksctl affected Chainguard eksctl —
fluxcd-source-controller-bitnami-compat affected Chainguard fluxcd-source-controller-bitnami-compat —
fluxcd-source-controller-bitnami-compat affected Wolfi fluxcd-source-controller-bitnami-compat —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller-bitnami-compat affected Wolfi flux-helm-controller-bitnami-compat —
flux-helm-controller-bitnami-compat affected Chainguard flux-helm-controller-bitnami-compat —
flux-helm-controller-iamguarded-compat affected Chainguard flux-helm-controller-iamguarded-compat —
flux-helm-controller-iamguarded-compat affected Wolfi flux-helm-controller-iamguarded-compat —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller-bitnami-compat affected Wolfi flux-source-controller-bitnami-compat —
flux-source-controller-bitnami-compat affected Chainguard flux-source-controller-bitnami-compat —
flux-source-controller-iamguarded-compat affected Chainguard flux-source-controller-iamguarded-compat —
flux-source-controller-iamguarded-compat affected Wolfi flux-source-controller-iamguarded-compat —
helm-fips affected Chainguard helm-fips —
helm-fips-3 affected Chainguard helm-fips-3 —
helm-fips-4 affected Chainguard helm-fips-4 —
helm-operator affected Wolfi helm-operator —
helm-operator affected Chainguard helm-operator —
helm-operator-compat affected Chainguard helm-operator-compat —
helm-operator-compat affected Wolfi helm-operator-compat —
helm-push affected Chainguard helm-push —
helm-push affected Wolfi helm-push —
istio-cni-fips-1.20 affected Chainguard istio-cni-fips-1.20 —
istio-cni-fips-1.20-compat affected Chainguard istio-cni-fips-1.20-compat —
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
istio-install-cni-fips-1.20 affected Chainguard istio-install-cni-fips-1.20 —
istio-install-cni-fips-1.20-compat affected Chainguard istio-install-cni-fips-1.20-compat —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-operator-fips-1.20 affected Chainguard istio-operator-fips-1.20 —
istio-pilot-agent-fips-1.20 affected Chainguard istio-pilot-agent-fips-1.20 —
istio-pilot-agent-fips-1.20-compat affected Chainguard istio-pilot-agent-fips-1.20-compat —
istio-pilot-discovery-fips-1.20 affected Chainguard istio-pilot-discovery-fips-1.20 —
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
k9s affected Chainguard k9s —
k9s affected Wolfi k9s —
kots affected Wolfi kots —
kots affected Chainguard kots —
kots-compat affected Chainguard kots-compat —
kots-compat affected Wolfi kots-compat —
kots-symlink-compat affected Wolfi kots-symlink-compat —
kots-symlink-compat affected Chainguard kots-symlink-compat —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kubevela affected Chainguard kubevela —
kubevela affected Wolfi kubevela —
kubevela-vela-cli affected Wolfi kubevela-vela-cli —
kubevela-vela-cli affected Chainguard kubevela-vela-cli —
kubevela-vela-core affected Wolfi kubevela-vela-core —
kubevela-vela-core affected Chainguard kubevela-vela-core —
kubevela-vela-core-compat affected Wolfi kubevela-vela-core-compat —
kubevela-vela-core-compat affected Chainguard kubevela-vela-core-compat —
trivy affected Wolfi trivy —
trivy affected Chainguard trivy —
up affected Chainguard up —
up affected Wolfi up —
vela-cli affected Chainguard vela-cli —
vela-cli affected Wolfi vela-cli —
vela-core affected Chainguard vela-core —
vela-core affected Wolfi vela-core —
zarf affected Chainguard zarf —
zarf affected Wolfi zarf —
zot affected Chainguard zot —
zot affected Wolfi zot —
Upstream advisory

CGA-xg36-qjh4-wc7w

Open SourceActive exploitation (sightings)2026-01-28

CGA-xg36-qjh4-wc7w

Affected products

ProductStatusVendorPackageEcosystem
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
Upstream advisory

CGA-w69x-4pr7-3qww

Open SourceActive exploitation (sightings)2026-01-28

CGA-w69x-4pr7-3qww

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-cffv-prrf-jc52

Open SourceActive exploitation (sightings)2026-01-28

CGA-cffv-prrf-jc52

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
Upstream advisory

CGA-6qr5-2pq4-4j8h

Open SourceActive exploitation (sightings)2026-01-28

CGA-6qr5-2pq4-4j8h

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
Upstream advisory

CGA-6fhm-qph5-fvrj

Open SourceActive exploitation (sightings)2026-01-28

CGA-6fhm-qph5-fvrj

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
Upstream advisory

CGA-6p62-jxc8-fj62

Open SourceActive exploitation (sightings)2026-01-29

CGA-6p62-jxc8-fj62

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-j22j-w6jf-rc23

Open SourceActive exploitation (sightings)2026-01-28

CGA-j22j-w6jf-rc23

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-qqrp-pj5q-r38m

Open SourceActive exploitation (sightings)2026-01-29

CGA-qqrp-pj5q-r38m

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-5mmh-8xr8-5522

Open SourceActive exploitation (sightings)2026-01-28

CGA-5mmh-8xr8-5522

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-rg2f-wh8h-jrh5

Open SourceActive exploitation (sightings)2026-01-29

CGA-rg2f-wh8h-jrh5

Affected products

ProductStatusVendorPackageEcosystem
boring-registry affected Wolfi boring-registry —
boring-registry affected Chainguard boring-registry —
cosign-fips affected Wolfi cosign-fips —
cosign-fips affected Chainguard cosign-fips —
external-secrets-0.7 affected Chainguard external-secrets-0.7 —
external-secrets-0.7-compat affected Chainguard external-secrets-0.7-compat —
external-secrets-fips affected Chainguard external-secrets-fips —
external-secrets-operator affected Chainguard external-secrets-operator —
external-secrets-operator affected Wolfi external-secrets-operator —
falco affected Chainguard falco —
falco affected Wolfi falco —
falcoctl affected Chainguard falcoctl —
falcoctl affected Wolfi falcoctl —
falcoctl-fips affected Chainguard falcoctl-fips —
falco-dev affected Chainguard falco-dev —
falco-dev affected Wolfi falco-dev —
falco-src affected Wolfi falco-src —
falco-src affected Chainguard falco-src —
gitsign affected Chainguard gitsign —
gitsign affected Wolfi gitsign —
gitsign-config affected Wolfi gitsign-config —
gitsign-config affected Chainguard gitsign-config —
gitsign-credential-cache affected Wolfi gitsign-credential-cache —
gitsign-credential-cache affected Chainguard gitsign-credential-cache —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-1.19-compat affected Wolfi istio-cni-1.19-compat —
istio-cni-1.19-compat affected Chainguard istio-cni-1.19-compat —
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
istio-cni-1.20 affected Wolfi istio-cni-1.20 —
istio-cni-1.20-compat affected Wolfi istio-cni-1.20-compat —
istio-cni-1.20-compat affected Chainguard istio-cni-1.20-compat —
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
istio-cni-fips-1.19-compat affected Chainguard istio-cni-fips-1.19-compat —
istio-install-cni-1.19 affected Wolfi istio-install-cni-1.19 —
istio-install-cni-1.19 affected Chainguard istio-install-cni-1.19 —
istio-install-cni-1.19-compat affected Wolfi istio-install-cni-1.19-compat —
istio-install-cni-1.19-compat affected Chainguard istio-install-cni-1.19-compat —
istio-install-cni-1.20 affected Chainguard istio-install-cni-1.20 —
istio-install-cni-1.20 affected Wolfi istio-install-cni-1.20 —
istio-install-cni-1.20-compat affected Wolfi istio-install-cni-1.20-compat —
istio-install-cni-1.20-compat affected Chainguard istio-install-cni-1.20-compat —
istio-install-cni-fips-1.19 affected Chainguard istio-install-cni-fips-1.19 —
istio-install-cni-fips-1.19-compat affected Chainguard istio-install-cni-fips-1.19-compat —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-pilot-agent-1.18 affected Wolfi istio-pilot-agent-1.18 —
istio-pilot-agent-1.18 affected Chainguard istio-pilot-agent-1.18 —
istio-pilot-agent-1.18-compat affected Chainguard istio-pilot-agent-1.18-compat —
istio-pilot-agent-1.18-compat affected Wolfi istio-pilot-agent-1.18-compat —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19-compat affected Chainguard istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.19-compat affected Wolfi istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
istio-pilot-agent-1.20-compat affected Chainguard istio-pilot-agent-1.20-compat —
istio-pilot-agent-1.20-compat affected Wolfi istio-pilot-agent-1.20-compat —
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
istio-pilot-agent-fips-1.19-compat affected Chainguard istio-pilot-agent-fips-1.19-compat —
istio-pilot-discovery-1.18 affected Wolfi istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.18 affected Chainguard istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.18-compat affected Wolfi istio-pilot-discovery-1.18-compat —
istio-pilot-discovery-1.18-compat affected Chainguard istio-pilot-discovery-1.18-compat —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19-compat affected Chainguard istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.19-compat affected Wolfi istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20-compat affected Wolfi istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-1.20-compat affected Chainguard istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
istio-pilot-discovery-fips-1.19-compat affected Chainguard istio-pilot-discovery-fips-1.19-compat —
kubescape affected Chainguard kubescape —
kubescape affected Wolfi kubescape —
kyverno affected Chainguard kyverno —
kyverno affected Wolfi kyverno —
kyverno-background-controller affected Chainguard kyverno-background-controller —
kyverno-background-controller affected Wolfi kyverno-background-controller —
kyverno-cleanup-controller affected Wolfi kyverno-cleanup-controller —
kyverno-cleanup-controller affected Chainguard kyverno-cleanup-controller —
kyverno-cli affected Chainguard kyverno-cli —
kyverno-cli affected Wolfi kyverno-cli —
kyverno-init-container affected Wolfi kyverno-init-container —
kyverno-init-container affected Chainguard kyverno-init-container —
kyverno-reports-controller affected Chainguard kyverno-reports-controller —
kyverno-reports-controller affected Wolfi kyverno-reports-controller —
mc affected Wolfi mc —
mc affected Chainguard mc —
mc-bitnami-2024-compat affected Wolfi mc-bitnami-2024-compat —
mc-bitnami-2024-compat affected Chainguard mc-bitnami-2024-compat —
mc-bitnami-2025-compat affected Wolfi mc-bitnami-2025-compat —
mc-bitnami-2025-compat affected Chainguard mc-bitnami-2025-compat —
mc-iamguarded-2025-compat affected Chainguard mc-iamguarded-2025-compat —
mc-iamguarded-2025-compat affected Wolfi mc-iamguarded-2025-compat —
minio affected Wolfi minio —
minio affected Chainguard minio —
minio-bitnami-2024-compat affected Wolfi minio-bitnami-2024-compat —
minio-bitnami-2024-compat affected Chainguard minio-bitnami-2024-compat —
minio-bitnami-2025-compat affected Wolfi minio-bitnami-2025-compat —
minio-bitnami-2025-compat affected Chainguard minio-bitnami-2025-compat —
minio-iamguarded-2025-compat affected Chainguard minio-iamguarded-2025-compat —
minio-iamguarded-2025-compat affected Wolfi minio-iamguarded-2025-compat —
spire-agent affected Wolfi spire-agent —
spire-agent affected Chainguard spire-agent —
spire-agent-fips affected Chainguard spire-agent-fips —
spire-oidc-discovery-provider affected Wolfi spire-oidc-discovery-provider —
spire-oidc-discovery-provider affected Chainguard spire-oidc-discovery-provider —
spire-oidc-discovery-provider-fips affected Chainguard spire-oidc-discovery-provider-fips —
spire-server affected Chainguard spire-server —
spire-server affected Wolfi spire-server —
spire-server-fips affected Chainguard spire-server-fips —
tekton-chains affected Chainguard tekton-chains —
tekton-chains affected Wolfi tekton-chains —
vexctl affected Chainguard vexctl —
vexctl affected Wolfi vexctl —
Upstream advisory

CGA-rpgf-46xv-22fc

Open SourceActive exploitation (sightings)2026-01-28

CGA-rpgf-46xv-22fc

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.18 affected Wolfi istio-pilot-agent-1.18 —
istio-pilot-agent-1.18 affected Chainguard istio-pilot-agent-1.18 —
Upstream advisory

CGA-rjc7-4vhw-626h

Open SourceActive exploitation (sightings)2026-01-28

CGA-rjc7-4vhw-626h

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
Upstream advisory

CGA-pc95-j683-rw5m

Open SourceActive exploitation (sightings)2026-01-28

CGA-pc95-j683-rw5m

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-hj99-38vq-hf2x

Open SourceActive exploitation (sightings)2026-01-28

CGA-hj99-38vq-hf2x

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
Upstream advisory

CGA-hj5p-q245-hx5j

Open SourceActive exploitation (sightings)2026-01-28

CGA-hj5p-q245-hx5j

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
Upstream advisory

CGA-g2wx-wqp3-m77w

Open SourceActive exploitation (sightings)2026-01-28

CGA-g2wx-wqp3-m77w

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
Upstream advisory

CGA-96jc-4g66-92pf

Open SourceActive exploitation (sightings)2026-01-28

CGA-96jc-4g66-92pf

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.18 affected Chainguard istio-pilot-discovery-1.18 —
istio-pilot-discovery-1.18 affected Wolfi istio-pilot-discovery-1.18 —
Upstream advisory

CGA-5f62-fvxx-5fvh

Open SourceActive exploitation (sightings)2026-01-28

CGA-5f62-fvxx-5fvh

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
Upstream advisory

CGA-57v2-mmmr-jq8g

Open SourceActive exploitation (sightings)2026-01-28

CGA-57v2-mmmr-jq8g

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
Upstream advisory

CGA-4h4f-7c26-wph6

Open SourceActive exploitation (sightings)2026-01-28

CGA-4h4f-7c26-wph6

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.20 affected Wolfi istio-cni-1.20 —
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
Upstream advisory

CGA-4jxf-wcrx-p97c

Open SourceActive exploitation (sightings)2026-01-28

CGA-4jxf-wcrx-p97c

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
Upstream advisory

CGA-3pp9-f8mv-3662

Open SourceActive exploitation (sightings)2026-01-28

CGA-3pp9-f8mv-3662

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
Upstream advisory

CGA-3p3g-cgmf-q7jr

Open SourceActive exploitation (sightings)2026-01-28

CGA-3p3g-cgmf-q7jr

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
Upstream advisory

CGA-3hmh-6hmr-cg6g

Open SourceActive exploitation (sightings)2026-01-28

CGA-3hmh-6hmr-cg6g

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
Upstream advisory

CGA-8gh2-x86j-qgg6

Open SourceActive exploitation (sightings)2026-01-29

CGA-8gh2-x86j-qgg6

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-99v8-cxvw-ggj9

Open SourceActive exploitation (sightings)2026-01-28

CGA-99v8-cxvw-ggj9

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-8p3g-j84c-g5wf

Open SourceActive exploitation (sightings)2026-01-29

CGA-8p3g-j84c-g5wf

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-5gjj-qr8p-xjcv

Open SourceActive exploitation (sightings)2026-01-28

CGA-5gjj-qr8p-xjcv

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-2mcw-g7p5-84x4

Open SourceActive exploitation (sightings)2026-01-29

CGA-2mcw-g7p5-84x4

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-f442-85f4-mfhp

Open SourceActive exploitation (sightings)2026-01-28

CGA-f442-85f4-mfhp

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
Upstream advisory

CGA-3g82-5xpr-h7x4

Open SourceActive exploitation (sightings)2026-01-29

CGA-3g82-5xpr-h7x4

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-frhj-r327-4vwr

Open SourceActive exploitation (sightings)2026-01-28

CGA-frhj-r327-4vwr

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-64mr-jm6h-3gqm

GoogleActive exploitation (sightings)2026-01-29

CGA-64mr-jm6h-3gqm

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-qm2q-q9xw-mxp4

GoogleActive exploitation (sightings)2026-01-28

CGA-qm2q-q9xw-mxp4

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-g23x-c7c7-j69j

Open SourceActive exploitation (sightings)2026-01-29

CGA-g23x-c7c7-j69j

Affected products

ProductStatusVendorPackageEcosystem
cloudflared affected Chainguard cloudflared —
cloudflared affected Wolfi cloudflared —
consul-1.15 affected Wolfi consul-1.15 —
consul-1.15 affected Chainguard consul-1.15 —
consul-1.15-oci-entrypoint affected Wolfi consul-1.15-oci-entrypoint —
consul-1.15-oci-entrypoint affected Chainguard consul-1.15-oci-entrypoint —
consul-1.15-oci-entrypoint-compat affected Wolfi consul-1.15-oci-entrypoint-compat —
consul-1.15-oci-entrypoint-compat affected Chainguard consul-1.15-oci-entrypoint-compat —
consul-1.16 affected Wolfi consul-1.16 —
consul-1.16 affected Chainguard consul-1.16 —
consul-1.16-oci-entrypoint affected Chainguard consul-1.16-oci-entrypoint —
consul-1.16-oci-entrypoint affected Wolfi consul-1.16-oci-entrypoint —
consul-1.16-oci-entrypoint-compat affected Chainguard consul-1.16-oci-entrypoint-compat —
consul-1.16-oci-entrypoint-compat affected Wolfi consul-1.16-oci-entrypoint-compat —
consul-1.17 affected Chainguard consul-1.17 —
consul-1.17-fips affected Chainguard consul-1.17-fips —
consul-1.17-fips-oci-entrypoint affected Chainguard consul-1.17-fips-oci-entrypoint —
consul-1.17-fips-oci-entrypoint-compat affected Chainguard consul-1.17-fips-oci-entrypoint-compat —
consul-1.17-oci-entrypoint affected Chainguard consul-1.17-oci-entrypoint —
consul-1.17-oci-entrypoint-compat affected Chainguard consul-1.17-oci-entrypoint-compat —
coredns affected Wolfi coredns —
coredns affected Chainguard coredns —
coredns-compat affected Wolfi coredns-compat —
coredns-compat affected Chainguard coredns-compat —
coredns-fips affected Chainguard coredns-fips —
juicefs-1.2 affected Chainguard juicefs-1.2 —
juicefs-1.2-compat affected Chainguard juicefs-1.2-compat —
juicefs-1.3 affected Wolfi juicefs-1.3 —
juicefs-1.3 affected Chainguard juicefs-1.3 —
juicefs-1.3-compat affected Chainguard juicefs-1.3-compat —
juicefs-1.3-compat affected Wolfi juicefs-1.3-compat —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kuma-coredns affected Wolfi kuma-coredns —
kuma-coredns affected Chainguard kuma-coredns —
Upstream advisory

CGA-wcwj-qxf4-fp8c

Open SourceActive exploitation (sightings)2026-01-28

CGA-wcwj-qxf4-fp8c

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
Upstream advisory

CGA-3pjm-3q9r-47hc

Open SourceActive exploitation (sightings)2026-01-29

CGA-3pjm-3q9r-47hc

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-9x5w-3hvv-hcpv

Open SourceActive exploitation (sightings)2026-01-28

CGA-9x5w-3hvv-hcpv

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-365q-m7c2-926v

Open SourceActive exploitation (sightings)2026-01-29

CGA-365q-m7c2-926v

Affected products

ProductStatusVendorPackageEcosystem
ruby3.1-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.1-fluentd-kubernetes-daemonset-1.16 —
ruby3.1-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.1-fluentd-kubernetes-daemonset-1.16-kinesis —
ruby3.2-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.2-fluentd-kubernetes-daemonset-1.16 —
ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis —
ruby3.2-json affected Chainguard ruby3.2-json —
ruby3.2-json affected Wolfi ruby3.2-json —
ruby3.3-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.3-fluentd-kubernetes-daemonset-1.16 —
ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis —
ruby3.3-json affected Chainguard ruby3.3-json —
ruby3.3-json affected Wolfi ruby3.3-json —
ruby3.4-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.4-fluentd-kubernetes-daemonset-1.16 —
ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis —
ruby3.4-json affected Chainguard ruby3.4-json —
ruby3.4-json affected Wolfi ruby3.4-json —
Upstream advisory

CGA-wf63-f6qj-gw8r

Open SourceActive exploitation (sightings)2026-01-28

CGA-wf63-f6qj-gw8r

Affected products

ProductStatusVendorPackageEcosystem
ruby3.2-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.2-fluentd-kubernetes-daemonset-1.16 —
ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis —
Upstream advisory

CGA-v366-92fc-fhp7

Open SourceActive exploitation (sightings)2026-01-28

CGA-v366-92fc-fhp7

Affected products

ProductStatusVendorPackageEcosystem
ruby3.3-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.3-fluentd-kubernetes-daemonset-1.16 —
ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis —
Upstream advisory

CGA-ghh8-76xh-6hwv

Open SourceActive exploitation (sightings)2026-01-28

CGA-ghh8-76xh-6hwv

Affected products

ProductStatusVendorPackageEcosystem
ruby3.1-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.1-fluentd-kubernetes-daemonset-1.16 —
ruby3.1-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.1-fluentd-kubernetes-daemonset-1.16-kinesis —
Upstream advisory

CGA-4x27-7gc4-5p6x

Open SourceActive exploitation (sightings)2026-01-28

CGA-4x27-7gc4-5p6x

Affected products

ProductStatusVendorPackageEcosystem
ruby3.4-fluentd-kubernetes-daemonset-1.16 affected Chainguard ruby3.4-fluentd-kubernetes-daemonset-1.16 —
ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis affected Chainguard ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis —
Upstream advisory

ECHO-ba36-854d-9ccc

Open SourceActive exploitation (sightings)2026-01-16

ECHO-ba36-854d-9ccc

Affected products

ProductStatusVendorPackageEcosystem
golang-1.24 affected Echo golang-1.24 —
Upstream advisory

CGA-f4xj-2x79-qrc6

Open SourceActive exploitation (sightings)2026-01-14

CGA-f4xj-2x79-qrc6

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
mods affected Chainguard mods —
mods affected Wolfi mods —
ollama affected Wolfi ollama —
ollama affected Chainguard ollama —
ollama-cpu affected Chainguard ollama-cpu —
ollama-cpu affected Wolfi ollama-cpu —
ollama-fips affected Chainguard ollama-fips —
Upstream advisory

GO-2025-4251

Open SourceActive exploitation (sightings)2026-01-14

Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected chainguard k8sgpt —
k8sgpt affected wolfi k8sgpt —
mods affected wolfi mods —
mods affected chainguard mods —
ollama affected wolfi ollama —
ollama affected chainguard ollama —
ollama-fips affected chainguard ollama-fips —
ollama/ollama affected github.com github.com/ollama/ollama —
Upstream advisory

CGA-qc6c-73wq-4jxw

Open SourceActive exploitation (sightings)2026-01-29

CGA-qc6c-73wq-4jxw

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-5pg7-p6ww-8hw5

Open SourceActive exploitation (sightings)2026-01-28

CGA-5pg7-p6ww-8hw5

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-wgrp-6w47-xfpg

Open SourceActive exploitation (sightings)2026-01-29

CGA-wgrp-6w47-xfpg

Affected products

ProductStatusVendorPackageEcosystem
berg affected Chainguard berg —
berg affected Wolfi berg —
linkerd2 affected Wolfi linkerd2 —
linkerd2 affected Chainguard linkerd2 —
linkerd2-cli affected Wolfi linkerd2-cli —
linkerd2-cli affected Chainguard linkerd2-cli —
linkerd2-controller affected Chainguard linkerd2-controller —
linkerd2-controller affected Wolfi linkerd2-controller —
linkerd2-controller-compat affected Wolfi linkerd2-controller-compat —
linkerd2-controller-compat affected Chainguard linkerd2-controller-compat —
linkerd2-debug affected Wolfi linkerd2-debug —
linkerd2-debug affected Chainguard linkerd2-debug —
linkerd2-metrics-api affected Wolfi linkerd2-metrics-api —
linkerd2-metrics-api affected Chainguard linkerd2-metrics-api —
linkerd2-metrics-api-compat affected Wolfi linkerd2-metrics-api-compat —
linkerd2-metrics-api-compat affected Chainguard linkerd2-metrics-api-compat —
linkerd2-policy-controller affected Chainguard linkerd2-policy-controller —
linkerd2-policy-controller affected Wolfi linkerd2-policy-controller —
linkerd2-policy-controller-compat affected Chainguard linkerd2-policy-controller-compat —
linkerd2-policy-controller-compat affected Wolfi linkerd2-policy-controller-compat —
linkerd2-proxy-identity affected Wolfi linkerd2-proxy-identity —
linkerd2-proxy-identity affected Chainguard linkerd2-proxy-identity —
linkerd2-tap affected Wolfi linkerd2-tap —
linkerd2-tap affected Chainguard linkerd2-tap —
linkerd2-tap-compat affected Chainguard linkerd2-tap-compat —
linkerd2-tap-compat affected Wolfi linkerd2-tap-compat —
linkerd2-web affected Chainguard linkerd2-web —
linkerd2-web affected Wolfi linkerd2-web —
linkerd-extension-init affected Wolfi linkerd-extension-init —
linkerd-extension-init affected Chainguard linkerd-extension-init —
linkerd-extension-init-compat affected Wolfi linkerd-extension-init-compat —
linkerd-extension-init-compat affected Chainguard linkerd-extension-init-compat —
lychee affected Chainguard lychee —
lychee affected Wolfi lychee —
nushell affected Chainguard nushell —
nushell affected Wolfi nushell —
nushell-plugins affected Wolfi nushell-plugins —
nushell-plugins affected Chainguard nushell-plugins —
rustup affected Chainguard rustup —
rustup affected Wolfi rustup —
sccache affected Chainguard sccache —
sccache affected Wolfi sccache —
sdp-device-id-service affected Wolfi sdp-device-id-service —
sdp-device-id-service affected Chainguard sdp-device-id-service —
sdp-identity-service affected Wolfi sdp-identity-service —
sdp-identity-service affected Chainguard sdp-identity-service —
sdp-k8s-injector affected Chainguard sdp-k8s-injector —
sdp-k8s-injector affected Wolfi sdp-k8s-injector —
zed affected Chainguard zed —
zed affected Wolfi zed —
Upstream advisory

CGA-rvw4-9qhj-whhf

Open SourceActive exploitation (sightings)2026-01-29

CGA-rvw4-9qhj-whhf

Affected products

ProductStatusVendorPackageEcosystem
aws-privateca-issuer affected Chainguard aws-privateca-issuer —
aws-privateca-issuer affected Wolfi aws-privateca-issuer —
aws-privateca-issuer-compat affected Chainguard aws-privateca-issuer-compat —
aws-privateca-issuer-compat affected Wolfi aws-privateca-issuer-compat —
aws-privateca-issuer-compat-fips affected Chainguard aws-privateca-issuer-compat-fips —
aws-privateca-issuer-fips affected Chainguard aws-privateca-issuer-fips —
cert-exporter affected Chainguard cert-exporter —
cert-exporter affected Wolfi cert-exporter —
cert-exporter-fips affected Chainguard cert-exporter-fips —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12-acmesolver affected Wolfi cert-manager-1.12-acmesolver —
cert-manager-1.12-acmesolver affected Chainguard cert-manager-1.12-acmesolver —
cert-manager-1.12-cainjector affected Wolfi cert-manager-1.12-cainjector —
cert-manager-1.12-cainjector affected Chainguard cert-manager-1.12-cainjector —
cert-manager-1.12-controller affected Wolfi cert-manager-1.12-controller —
cert-manager-1.12-controller affected Chainguard cert-manager-1.12-controller —
cert-manager-1.12-webhook affected Wolfi cert-manager-1.12-webhook —
cert-manager-1.12-webhook affected Chainguard cert-manager-1.12-webhook —
cert-manager-acmesolver-1.12 affected Chainguard cert-manager-acmesolver-1.12 —
cert-manager-acmesolver-1.12-bitnami-compat affected Chainguard cert-manager-acmesolver-1.12-bitnami-compat —
cert-manager-acmesolver-1.12-iamguarded-compat affected Chainguard cert-manager-acmesolver-1.12-iamguarded-compat —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-1.12 affected Chainguard cert-manager-cainjector-1.12 —
cert-manager-cainjector-1.12-bitnami-compat affected Chainguard cert-manager-cainjector-1.12-bitnami-compat —
cert-manager-cainjector-1.12-iamguarded-compat affected Chainguard cert-manager-cainjector-1.12-iamguarded-compat —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-cmctl affected Wolfi cert-manager-cmctl —
cert-manager-cmctl affected Chainguard cert-manager-cmctl —
cert-manager-cmctl-fips affected Chainguard cert-manager-cmctl-fips —
cert-manager-controller-1.12 affected Chainguard cert-manager-controller-1.12 —
cert-manager-controller-1.12-bitnami-compat affected Chainguard cert-manager-controller-1.12-bitnami-compat —
cert-manager-controller-1.12-iamguarded-compat affected Chainguard cert-manager-controller-1.12-iamguarded-compat —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-istio-csr affected Chainguard cert-manager-istio-csr —
cert-manager-istio-csr affected Wolfi cert-manager-istio-csr —
cert-manager-istio-csr-compat affected Wolfi cert-manager-istio-csr-compat —
cert-manager-istio-csr-compat affected Chainguard cert-manager-istio-csr-compat —
cert-manager-webhook-1.12 affected Chainguard cert-manager-webhook-1.12 —
cert-manager-webhook-1.12-bitnami-compat affected Chainguard cert-manager-webhook-1.12-bitnami-compat —
cert-manager-webhook-1.12-iamguarded-compat affected Chainguard cert-manager-webhook-1.12-iamguarded-compat —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
cert-manager-webhook-pdns affected Wolfi cert-manager-webhook-pdns —
cert-manager-webhook-pdns affected Chainguard cert-manager-webhook-pdns —
cert-manager-webhook-pdns-fips affected Chainguard cert-manager-webhook-pdns-fips —
cmctl-1.12 affected Chainguard cmctl-1.12 —
cmctl-1.12 affected Wolfi cmctl-1.12 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
step-issuer affected Chainguard step-issuer —
step-issuer affected Wolfi step-issuer —
step-issuer-compat affected Chainguard step-issuer-compat —
step-issuer-compat affected Wolfi step-issuer-compat —
step-issuer-fips affected Chainguard step-issuer-fips —
step-issuer-fips-compat affected Chainguard step-issuer-fips-compat —
Upstream advisory

CLEANSTART-2026-ON38469

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Affected products

ProductStatusVendorPackageEcosystem
k8ssandra-client-fips affected CleanStart k8ssandra-client-fips —
Upstream advisory

CLEANSTART-2026-VV68546

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Affected products

ProductStatusVendorPackageEcosystem
k8ssandra-client-fips affected CleanStart k8ssandra-client-fips —
Upstream advisory

CLEANSTART-2026-PW02676

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Affected products

ProductStatusVendorPackageEcosystem
k8ssandra-client-fips affected CleanStart k8ssandra-client-fips —
Upstream advisory

CLEANSTART-2026-OO14630

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

tar

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected CleanStart vault-k8s —
Upstream advisory

CLEANSTART-2026-HY43775

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

Within HostnameError

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected CleanStart vault-k8s —
Upstream advisory

CLEANSTART-2026-UY85485

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

Within HostnameError

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected CleanStart vault-k8s —
Upstream advisory

CLEANSTART-2026-YL27116

Open SourceActive exploitation (sightings)CRITICAL2026-01-30

tar

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected CleanStart kubernetes —
Upstream advisory

CLEANSTART-2025-EU07511

Open SourceActive exploitation (sightings)2026-01-16

Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected CleanStart vault-k8s —
Upstream advisory

ECHO-d085-1c12-aa45

Open SourceActive exploitation (sightings)2026-01-16

ECHO-d085-1c12-aa45

Affected products

ProductStatusVendorPackageEcosystem
golang-1.24 affected Echo golang-1.24 —
Upstream advisory

CGA-w6fj-xrhf-qq4m

Open SourceActive exploitation (sightings)2026-01-29

CGA-w6fj-xrhf-qq4m

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-r686-652q-2qxp

Open SourceActive exploitation (sightings)2026-01-28

CGA-r686-652q-2qxp

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

ECHO-b84c-8c92-136e

Open SourceActive exploitation (sightings)2026-01-28

ECHO-b84c-8c92-136e

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected k8s.io k8s.io/kubernetes —
Upstream advisory

DEBIAN-CVE-2026-23991

Open SourceActive exploitation (sightings)HIGH2026-01-22

DEBIAN-CVE-2026-23991

Affected products

ProductStatusVendorPackageEcosystem
golang-github-theupdateframework-go-tuf affected Debian:13 golang-github-theupdateframework-go-tuf —
golang-github-theupdateframework-go-tuf affected Debian:14 golang-github-theupdateframework-go-tuf —
Upstream advisory

CGA-2gcj-rjgc-558j

Open SourceActive exploitation (sightings)2026-01-29

CGA-2gcj-rjgc-558j

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-jvqm-7p9x-8849

Open SourceActive exploitation (sightings)2026-01-28

CGA-jvqm-7p9x-8849

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-mqfg-jvcg-5qvm

Open SourceActive exploitation (sightings)2026-01-29

CGA-mqfg-jvcg-5qvm

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-rx3h-g5h3-8fcq

Open SourceActive exploitation (sightings)2026-01-28

CGA-rx3h-g5h3-8fcq

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-xwp5-6j86-c2cw

Open SourceActive exploitation (sightings)2026-01-29

CGA-xwp5-6j86-c2cw

Affected products

ProductStatusVendorPackageEcosystem
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.12-acmesolver affected Wolfi cert-manager-1.12-acmesolver —
cert-manager-1.12-acmesolver affected Chainguard cert-manager-1.12-acmesolver —
cert-manager-1.12-cainjector affected Chainguard cert-manager-1.12-cainjector —
cert-manager-1.12-cainjector affected Wolfi cert-manager-1.12-cainjector —
cert-manager-1.12-controller affected Chainguard cert-manager-1.12-controller —
cert-manager-1.12-controller affected Wolfi cert-manager-1.12-controller —
cert-manager-1.12-webhook affected Chainguard cert-manager-1.12-webhook —
cert-manager-1.12-webhook affected Wolfi cert-manager-1.12-webhook —
cert-manager-1.13 affected Wolfi cert-manager-1.13 —
cert-manager-1.13 affected Chainguard cert-manager-1.13 —
cert-manager-1.13-acmesolver affected Chainguard cert-manager-1.13-acmesolver —
cert-manager-1.13-acmesolver affected Wolfi cert-manager-1.13-acmesolver —
cert-manager-1.13-cainjector affected Wolfi cert-manager-1.13-cainjector —
cert-manager-1.13-cainjector affected Chainguard cert-manager-1.13-cainjector —
cert-manager-1.13-controller affected Wolfi cert-manager-1.13-controller —
cert-manager-1.13-controller affected Chainguard cert-manager-1.13-controller —
cert-manager-1.13-webhook affected Chainguard cert-manager-1.13-webhook —
cert-manager-1.13-webhook affected Wolfi cert-manager-1.13-webhook —
cert-manager-1.14 affected Chainguard cert-manager-1.14 —
cert-manager-1.14 affected Wolfi cert-manager-1.14 —
cert-manager-1.14-acmesolver affected Wolfi cert-manager-1.14-acmesolver —
cert-manager-1.14-acmesolver affected Chainguard cert-manager-1.14-acmesolver —
cert-manager-1.14-cainjector affected Wolfi cert-manager-1.14-cainjector —
cert-manager-1.14-cainjector affected Chainguard cert-manager-1.14-cainjector —
cert-manager-1.14-controller affected Chainguard cert-manager-1.14-controller —
cert-manager-1.14-controller affected Wolfi cert-manager-1.14-controller —
cert-manager-1.14-startupapicheck affected Chainguard cert-manager-1.14-startupapicheck —
cert-manager-1.14-webhook affected Chainguard cert-manager-1.14-webhook —
cert-manager-1.14-webhook affected Wolfi cert-manager-1.14-webhook —
cert-manager-acmesolver-1.12 affected Chainguard cert-manager-acmesolver-1.12 —
cert-manager-acmesolver-1.12-bitnami-compat affected Chainguard cert-manager-acmesolver-1.12-bitnami-compat —
cert-manager-acmesolver-1.12-iamguarded-compat affected Chainguard cert-manager-acmesolver-1.12-iamguarded-compat —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-1.12 affected Chainguard cert-manager-cainjector-1.12 —
cert-manager-cainjector-1.12-bitnami-compat affected Chainguard cert-manager-cainjector-1.12-bitnami-compat —
cert-manager-cainjector-1.12-iamguarded-compat affected Chainguard cert-manager-cainjector-1.12-iamguarded-compat —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-controller-1.12 affected Chainguard cert-manager-controller-1.12 —
cert-manager-controller-1.12-bitnami-compat affected Chainguard cert-manager-controller-1.12-bitnami-compat —
cert-manager-controller-1.12-iamguarded-compat affected Chainguard cert-manager-controller-1.12-iamguarded-compat —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-fips-1.13 affected Chainguard cert-manager-fips-1.13 —
cert-manager-fips-1.13-acmesolver affected Chainguard cert-manager-fips-1.13-acmesolver —
cert-manager-fips-1.13-cainjector affected Chainguard cert-manager-fips-1.13-cainjector —
cert-manager-fips-1.13-cmctl affected Chainguard cert-manager-fips-1.13-cmctl —
cert-manager-fips-1.13-controller affected Chainguard cert-manager-fips-1.13-controller —
cert-manager-fips-1.13-webhook affected Chainguard cert-manager-fips-1.13-webhook —
cert-manager-webhook-1.12 affected Chainguard cert-manager-webhook-1.12 —
cert-manager-webhook-1.12-bitnami-compat affected Chainguard cert-manager-webhook-1.12-bitnami-compat —
cert-manager-webhook-1.12-iamguarded-compat affected Chainguard cert-manager-webhook-1.12-iamguarded-compat —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
chartmuseum affected Wolfi chartmuseum —
chartmuseum affected Chainguard chartmuseum —
cilium-cli affected Wolfi cilium-cli —
cilium-cli affected Chainguard cilium-cli —
cmctl-1.12 affected Wolfi cmctl-1.12 —
cmctl-1.12 affected Chainguard cmctl-1.12 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-1.13 affected Wolfi cmctl-1.13 —
cmctl-1.13 affected Chainguard cmctl-1.13 —
cmctl-1.13-fips affected Chainguard cmctl-1.13-fips —
cmctl-1.14 affected Chainguard cmctl-1.14 —
cmctl-1.14 affected Wolfi cmctl-1.14 —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
eksctl affected Chainguard eksctl —
eksctl affected Wolfi eksctl —
fluxcd-source-controller-bitnami-compat affected Wolfi fluxcd-source-controller-bitnami-compat —
fluxcd-source-controller-bitnami-compat affected Chainguard fluxcd-source-controller-bitnami-compat —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller-bitnami-compat affected Wolfi flux-helm-controller-bitnami-compat —
flux-helm-controller-bitnami-compat affected Chainguard flux-helm-controller-bitnami-compat —
flux-helm-controller-iamguarded-compat affected Wolfi flux-helm-controller-iamguarded-compat —
flux-helm-controller-iamguarded-compat affected Chainguard flux-helm-controller-iamguarded-compat —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller-bitnami-compat affected Wolfi flux-source-controller-bitnami-compat —
flux-source-controller-bitnami-compat affected Chainguard flux-source-controller-bitnami-compat —
flux-source-controller-iamguarded-compat affected Chainguard flux-source-controller-iamguarded-compat —
flux-source-controller-iamguarded-compat affected Wolfi flux-source-controller-iamguarded-compat —
helm-fips affected Chainguard helm-fips —
helm-fips-3 affected Chainguard helm-fips-3 —
helm-fips-4 affected Chainguard helm-fips-4 —
helm-operator affected Chainguard helm-operator —
helm-operator affected Wolfi helm-operator —
helm-operator-compat affected Wolfi helm-operator-compat —
helm-operator-compat affected Chainguard helm-operator-compat —
helm-push affected Wolfi helm-push —
helm-push affected Chainguard helm-push —
istio-cni-fips-1.20 affected Chainguard istio-cni-fips-1.20 —
istio-cni-fips-1.20-compat affected Chainguard istio-cni-fips-1.20-compat —
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
istio-install-cni-fips-1.20 affected Chainguard istio-install-cni-fips-1.20 —
istio-install-cni-fips-1.20-compat affected Chainguard istio-install-cni-fips-1.20-compat —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-operator-fips-1.20 affected Chainguard istio-operator-fips-1.20 —
istio-pilot-agent-fips-1.20 affected Chainguard istio-pilot-agent-fips-1.20 —
istio-pilot-agent-fips-1.20-compat affected Chainguard istio-pilot-agent-fips-1.20-compat —
istio-pilot-discovery-fips-1.20 affected Chainguard istio-pilot-discovery-fips-1.20 —
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
k9s affected Wolfi k9s —
k9s affected Chainguard k9s —
kots affected Wolfi kots —
kots affected Chainguard kots —
kots-compat affected Chainguard kots-compat —
kots-compat affected Wolfi kots-compat —
kots-symlink-compat affected Chainguard kots-symlink-compat —
kots-symlink-compat affected Wolfi kots-symlink-compat —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kubevela affected Chainguard kubevela —
kubevela affected Wolfi kubevela —
kubevela-vela-cli affected Chainguard kubevela-vela-cli —
kubevela-vela-cli affected Wolfi kubevela-vela-cli —
kubevela-vela-core affected Wolfi kubevela-vela-core —
kubevela-vela-core affected Chainguard kubevela-vela-core —
kubevela-vela-core-compat affected Chainguard kubevela-vela-core-compat —
kubevela-vela-core-compat affected Wolfi kubevela-vela-core-compat —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
up affected Wolfi up —
up affected Chainguard up —
vela-cli affected Chainguard vela-cli —
vela-cli affected Wolfi vela-cli —
vela-core affected Wolfi vela-core —
vela-core affected Chainguard vela-core —
zarf affected Chainguard zarf —
zarf affected Wolfi zarf —
zot affected Wolfi zot —
zot affected Chainguard zot —
Upstream advisory

CGA-vj2x-r92w-wrxm

Open SourceActive exploitation (sightings)2026-01-28

CGA-vj2x-r92w-wrxm

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
Upstream advisory

CGA-cj83-4cc6-2j6c

Open SourceActive exploitation (sightings)2026-01-28

CGA-cj83-4cc6-2j6c

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
Upstream advisory

CGA-799f-r3cg-cmr9

Open SourceActive exploitation (sightings)2026-01-28

CGA-799f-r3cg-cmr9

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-4rfw-jx4j-gh93

Open SourceActive exploitation (sightings)2026-01-28

CGA-4rfw-jx4j-gh93

Affected products

ProductStatusVendorPackageEcosystem
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
Upstream advisory

CGA-4fjg-4pjv-j6vj

Open SourceActive exploitation (sightings)2026-01-28

CGA-4fjg-4pjv-j6vj

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
Upstream advisory

CGA-4663-xr4j-4xxm

Open SourceActive exploitation (sightings)2026-01-29

CGA-4663-xr4j-4xxm

Affected products

ProductStatusVendorPackageEcosystem
boring-registry affected Wolfi boring-registry —
boring-registry affected Chainguard boring-registry —
boring-registry-fips affected Chainguard boring-registry-fips —
external-secrets-0.7 affected Chainguard external-secrets-0.7 —
external-secrets-0.7-compat affected Chainguard external-secrets-0.7-compat —
external-secrets-fips affected Chainguard external-secrets-fips —
external-secrets-operator affected Wolfi external-secrets-operator —
external-secrets-operator affected Chainguard external-secrets-operator —
falco affected Wolfi falco —
falco affected Chainguard falco —
falcoctl affected Wolfi falcoctl —
falcoctl affected Chainguard falcoctl —
falcoctl-fips affected Chainguard falcoctl-fips —
falco-dev affected Chainguard falco-dev —
falco-dev affected Wolfi falco-dev —
falco-src affected Chainguard falco-src —
falco-src affected Wolfi falco-src —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-1.19-compat affected Wolfi istio-cni-1.19-compat —
istio-cni-1.19-compat affected Chainguard istio-cni-1.19-compat —
istio-cni-1.20 affected Wolfi istio-cni-1.20 —
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
istio-cni-1.20-compat affected Wolfi istio-cni-1.20-compat —
istio-cni-1.20-compat affected Chainguard istio-cni-1.20-compat —
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
istio-cni-fips-1.19-compat affected Chainguard istio-cni-fips-1.19-compat —
istio-cni-fips-1.20 affected Chainguard istio-cni-fips-1.20 —
istio-cni-fips-1.20-compat affected Chainguard istio-cni-fips-1.20-compat —
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
istio-install-cni-1.19 affected Wolfi istio-install-cni-1.19 —
istio-install-cni-1.19 affected Chainguard istio-install-cni-1.19 —
istio-install-cni-1.19-compat affected Wolfi istio-install-cni-1.19-compat —
istio-install-cni-1.19-compat affected Chainguard istio-install-cni-1.19-compat —
istio-install-cni-1.20 affected Wolfi istio-install-cni-1.20 —
istio-install-cni-1.20 affected Chainguard istio-install-cni-1.20 —
istio-install-cni-1.20-compat affected Wolfi istio-install-cni-1.20-compat —
istio-install-cni-1.20-compat affected Chainguard istio-install-cni-1.20-compat —
istio-install-cni-fips-1.19 affected Chainguard istio-install-cni-fips-1.19 —
istio-install-cni-fips-1.19-compat affected Chainguard istio-install-cni-fips-1.19-compat —
istio-install-cni-fips-1.20 affected Chainguard istio-install-cni-fips-1.20 —
istio-install-cni-fips-1.20-compat affected Chainguard istio-install-cni-fips-1.20-compat —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-operator-fips-1.20 affected Chainguard istio-operator-fips-1.20 —
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
istio-pilot-agent-1.19-compat affected Wolfi istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.19-compat affected Chainguard istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
istio-pilot-agent-1.20-compat affected Chainguard istio-pilot-agent-1.20-compat —
istio-pilot-agent-1.20-compat affected Wolfi istio-pilot-agent-1.20-compat —
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
istio-pilot-agent-fips-1.19-compat affected Chainguard istio-pilot-agent-fips-1.19-compat —
istio-pilot-agent-fips-1.20 affected Chainguard istio-pilot-agent-fips-1.20 —
istio-pilot-agent-fips-1.20-compat affected Chainguard istio-pilot-agent-fips-1.20-compat —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19-compat affected Wolfi istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.19-compat affected Chainguard istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20-compat affected Wolfi istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-1.20-compat affected Chainguard istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
istio-pilot-discovery-fips-1.19-compat affected Chainguard istio-pilot-discovery-fips-1.19-compat —
istio-pilot-discovery-fips-1.20 affected Chainguard istio-pilot-discovery-fips-1.20 —
kyverno affected Chainguard kyverno —
kyverno affected Wolfi kyverno —
kyverno-background-controller affected Chainguard kyverno-background-controller —
kyverno-background-controller affected Wolfi kyverno-background-controller —
kyverno-cleanup-controller affected Chainguard kyverno-cleanup-controller —
kyverno-cleanup-controller affected Wolfi kyverno-cleanup-controller —
kyverno-cli affected Wolfi kyverno-cli —
kyverno-cli affected Chainguard kyverno-cli —
kyverno-init-container affected Wolfi kyverno-init-container —
kyverno-init-container affected Chainguard kyverno-init-container —
kyverno-reports-controller affected Chainguard kyverno-reports-controller —
kyverno-reports-controller affected Wolfi kyverno-reports-controller —
mc affected Wolfi mc —
mc affected Chainguard mc —
mc-bitnami-2024-compat affected Chainguard mc-bitnami-2024-compat —
mc-bitnami-2024-compat affected Wolfi mc-bitnami-2024-compat —
mc-bitnami-2025-compat affected Wolfi mc-bitnami-2025-compat —
mc-bitnami-2025-compat affected Chainguard mc-bitnami-2025-compat —
mc-fips affected Chainguard mc-fips —
mc-iamguarded-2025-compat affected Wolfi mc-iamguarded-2025-compat —
mc-iamguarded-2025-compat affected Chainguard mc-iamguarded-2025-compat —
minio affected Chainguard minio —
minio affected Wolfi minio —
minio-bitnami-2024-compat affected Chainguard minio-bitnami-2024-compat —
minio-bitnami-2024-compat affected Wolfi minio-bitnami-2024-compat —
minio-bitnami-2025-compat affected Chainguard minio-bitnami-2025-compat —
minio-bitnami-2025-compat affected Wolfi minio-bitnami-2025-compat —
minio-fips affected Chainguard minio-fips —
minio-iamguarded-2025-compat affected Wolfi minio-iamguarded-2025-compat —
minio-iamguarded-2025-compat affected Chainguard minio-iamguarded-2025-compat —
spire-agent affected Chainguard spire-agent —
spire-agent affected Wolfi spire-agent —
spire-agent-fips affected Chainguard spire-agent-fips —
spire-oidc-discovery-provider affected Chainguard spire-oidc-discovery-provider —
spire-oidc-discovery-provider affected Wolfi spire-oidc-discovery-provider —
spire-oidc-discovery-provider-fips affected Chainguard spire-oidc-discovery-provider-fips —
spire-server affected Wolfi spire-server —
spire-server affected Chainguard spire-server —
spire-server-fips affected Chainguard spire-server-fips —
Upstream advisory

CGA-rr3f-839q-f5g7

Open SourceActive exploitation (sightings)2026-01-28

CGA-rr3f-839q-f5g7

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
Upstream advisory

CGA-rq48-3v9w-f6gr

Open SourceActive exploitation (sightings)2026-01-28

CGA-rq48-3v9w-f6gr

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
Upstream advisory

CGA-qj22-hv62-f98p

Open SourceActive exploitation (sightings)2026-01-28

CGA-qj22-hv62-f98p

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
Upstream advisory

CGA-pw5x-qmcr-48fg

Open SourceActive exploitation (sightings)2026-01-28

CGA-pw5x-qmcr-48fg

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
Upstream advisory

CGA-p7hh-9qf3-fjpg

Open SourceActive exploitation (sightings)2026-01-28

CGA-p7hh-9qf3-fjpg

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
Upstream advisory

CGA-mr93-pcjw-6h9p

Open SourceActive exploitation (sightings)2026-01-28

CGA-mr93-pcjw-6h9p

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-m644-hqp9-j652

Open SourceActive exploitation (sightings)2026-01-28

CGA-m644-hqp9-j652

Affected products

ProductStatusVendorPackageEcosystem
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
Upstream advisory

CGA-8v47-gjqh-4qx4

Open SourceActive exploitation (sightings)2026-01-28

CGA-8v47-gjqh-4qx4

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.20 affected Wolfi istio-cni-1.20 —
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
Upstream advisory

CGA-7qj4-2m99-wgrr

Open SourceActive exploitation (sightings)2026-01-28

CGA-7qj4-2m99-wgrr

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
Upstream advisory

CGA-7mq7-6gv2-35xj

Open SourceActive exploitation (sightings)2026-01-28

CGA-7mq7-6gv2-35xj

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
Upstream advisory

CGA-78rf-j4p7-rww7

Open SourceActive exploitation (sightings)2026-01-28

CGA-78rf-j4p7-rww7

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
Upstream advisory

CGA-6pm8-p738-rrw3

Open SourceActive exploitation (sightings)2026-01-28

CGA-6pm8-p738-rrw3

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.20 affected Chainguard istio-pilot-agent-1.20 —
istio-pilot-agent-1.20 affected Wolfi istio-pilot-agent-1.20 —
Upstream advisory

CGA-5f79-cv7f-rh64

Open SourceActive exploitation (sightings)2026-01-28

CGA-5f79-cv7f-rh64

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
Upstream advisory

CGA-3hxj-r8fv-w7p3

Open SourceActive exploitation (sightings)2026-01-29

CGA-3hxj-r8fv-w7p3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-v3g9-xcwq-j7pp

Open SourceActive exploitation (sightings)2026-01-28

CGA-v3g9-xcwq-j7pp

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-wq33-7ggc-qw9m

GoogleActive exploitation (sightings)2026-01-29

CGA-wq33-7ggc-qw9m

Affected products

ProductStatusVendorPackageEcosystem
apache-pulsar-4.0 affected Chainguard apache-pulsar-4.0 —
apache-pulsar-4.1 affected Wolfi apache-pulsar-4.1 —
apache-pulsar-4.1 affected Chainguard apache-pulsar-4.1 —
apache-pulsar-fips-4.0 affected Chainguard apache-pulsar-fips-4.0 —
apache-pulsar-fips-4.1 affected Chainguard apache-pulsar-fips-4.1 —
druid affected Wolfi druid —
druid affected Chainguard druid —
geoserver-2.28 affected Chainguard geoserver-2.28 —
geoserver-2.28-community affected Chainguard geoserver-2.28-community —
pinot affected Chainguard pinot —
pinot-fips affected Chainguard pinot-fips —
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-3g39-369v-jrq5

Open SourceActive exploitation (sightings)2026-01-29

CGA-3g39-369v-jrq5

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-wr9p-44h8-m6x2

Open SourceActive exploitation (sightings)2026-01-28

CGA-wr9p-44h8-m6x2

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-fwv8-6hr8-8793

Open SourceActive exploitation (sightings)2026-01-29

CGA-fwv8-6hr8-8793

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-5q6p-94r2-8fhx

Open SourceActive exploitation (sightings)2026-01-28

CGA-5q6p-94r2-8fhx

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-936r-4rjf-wqpr

Open SourceActive exploitation (sightings)2026-01-29

CGA-936r-4rjf-wqpr

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-g27r-6675-2gp3

Open SourceActive exploitation (sightings)2026-01-29

CGA-g27r-6675-2gp3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-h8x7-48j8-wv5w

Open SourceActive exploitation (sightings)2026-01-28

CGA-h8x7-48j8-wv5w

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-h3fm-cw8f-mvp9

Open SourceActive exploitation (sightings)2026-01-28

CGA-h3fm-cw8f-mvp9

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-g8wg-5hc3-v2wf

Open SourceActive exploitation (sightings)2026-01-29

CGA-g8wg-5hc3-v2wf

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-36w3-7vjj-hjfq

Open SourceActive exploitation (sightings)2026-01-29

CGA-36w3-7vjj-hjfq

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-vw72-7495-5rw5

Open SourceActive exploitation (sightings)2026-01-28

CGA-vw72-7495-5rw5

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-fp9g-6r22-7q68

Open SourceActive exploitation (sightings)2026-01-28

CGA-fp9g-6r22-7q68

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CVE-2026-20973

Open SourceActive exploitation (sightings)CRITICAL2026-01-05

Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.

CVEs:CVE-2026-20973

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CGA-5gxj-54wj-vxx6

Open SourceActive exploitation (sightings)2026-01-29

CGA-5gxj-54wj-vxx6

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

GHSA-jrmj-c5cx-3cw6

Open SourceActive exploitation (sightings)HIGH2026-01-09

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Affected products

ProductStatusVendorPackageEcosystem
compiler affected angular @angular/compiler —
core affected angular @angular/core —
Upstream advisory

GHSA-jrmj-c5cx-3cw6

Open SourceActive exploitation (sightings)HIGH2026-01-09

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

Affected products

ProductStatusVendorPackageEcosystem
compiler affected angular @angular/compiler —
core affected angular @angular/core —
kubeflow-katib affected chainguard kubeflow-katib —
kubeflow-katib affected wolfi kubeflow-katib —
Upstream advisory

CVE-2026-22610

Open SourceActive exploitation (sightings)HIGH2026-01-09

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

CVEs:CVE-2026-22610

Affected products

ProductStatusVendorPackageEcosystem
compiler affected angular @angular/compiler —
core affected angular @angular/core —
Upstream advisory

CVE-2026-22610

Open SourceActive exploitation (sightings)CRITICAL2026-01-09

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identif...

CVEs:CVE-2026-22610

Affected products

ProductStatusVendorPackageEcosystem
angular affected angular — —
Upstream advisory

CVE-2026-22610

Open SourceActive exploitation (sightings)HIGH2026-01-09

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

CVEs:CVE-2026-22610

Affected products

ProductStatusVendorPackageEcosystem
compiler affected angular @angular/compiler —
core affected angular @angular/core —
Upstream advisory

CGA-4h45-c2v9-v9j5

Open SourceActive exploitation (sightings)2026-01-29

CGA-4h45-c2v9-v9j5

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-9x5c-pxp9-wcmq

Open SourceActive exploitation (sightings)2026-01-29

CGA-9x5c-pxp9-wcmq

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-4xmm-rxcm-rhp2

Open SourceActive exploitation (sightings)2026-01-29

CGA-4xmm-rxcm-rhp2

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-hgxf-j5hr-qw36

Open SourceActive exploitation (sightings)2026-01-28

CGA-hgxf-j5hr-qw36

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
Upstream advisory

CGA-4fw6-wrq3-g9qf

Open SourceActive exploitation (sightings)2026-01-28

CGA-4fw6-wrq3-g9qf

Affected products

ProductStatusVendorPackageEcosystem
nrdot-collector-k8s affected Chainguard nrdot-collector-k8s —
nrdot-collector-k8s-compat affected Chainguard nrdot-collector-k8s-compat —
Upstream advisory

CGA-9854-x64v-75m7

Open SourceActive exploitation (sightings)2026-01-07

CGA-9854-x64v-75m7

Affected products

ProductStatusVendorPackageEcosystem
amazon-cloudwatch-agent affected Wolfi amazon-cloudwatch-agent —
amazon-cloudwatch-agent affected Chainguard amazon-cloudwatch-agent —
amazon-cloudwatch-agent-fips affected Chainguard amazon-cloudwatch-agent-fips —
argo-cd-3.0-compat affected Wolfi argo-cd-3.0-compat —
argo-cd-3.0-compat affected Chainguard argo-cd-3.0-compat —
argo-cd-3.1 affected Chainguard argo-cd-3.1 —
argo-cd-3.1 affected Wolfi argo-cd-3.1 —
argo-cd-3.1-compat affected Chainguard argo-cd-3.1-compat —
argo-cd-3.1-compat affected Wolfi argo-cd-3.1-compat —
argo-cd-3.1-iamguarded-compat affected Chainguard argo-cd-3.1-iamguarded-compat —
argo-cd-3.1-repo-server affected Wolfi argo-cd-3.1-repo-server —
argo-cd-3.1-repo-server affected Chainguard argo-cd-3.1-repo-server —
argo-cd-3.2 affected Wolfi argo-cd-3.2 —
argo-cd-3.2 affected Chainguard argo-cd-3.2 —
argo-cd-3.2-compat affected Wolfi argo-cd-3.2-compat —
argo-cd-3.2-compat affected Chainguard argo-cd-3.2-compat —
argo-cd-fips-3.0 affected Chainguard argo-cd-fips-3.0 —
argo-cd-fips-3.0-compat affected Chainguard argo-cd-fips-3.0-compat —
argo-cd-fips-3.0-iamguarded-compat affected Chainguard argo-cd-fips-3.0-iamguarded-compat —
argo-cd-fips-3.0-repo-server affected Chainguard argo-cd-fips-3.0-repo-server —
argo-cd-fips-3.1 affected Chainguard argo-cd-fips-3.1 —
argo-cd-fips-3.1-compat affected Chainguard argo-cd-fips-3.1-compat —
argo-cd-fips-3.1-iamguarded-compat affected Chainguard argo-cd-fips-3.1-iamguarded-compat —
argo-cd-fips-3.1-repo-server affected Chainguard argo-cd-fips-3.1-repo-server —
argo-cd-fips-3.2 affected Chainguard argo-cd-fips-3.2 —
argo-cd-fips-3.2-compat affected Chainguard argo-cd-fips-3.2-compat —
argo-cd-fips-3.2-iamguarded-compat affected Chainguard argo-cd-fips-3.2-iamguarded-compat —
argo-cd-fips-3.2-repo-server affected Chainguard argo-cd-fips-3.2-repo-server —
argo-rollouts affected Wolfi argo-rollouts —
argo-rollouts affected Chainguard argo-rollouts —
argo-rollouts-fips affected Chainguard argo-rollouts-fips —
argo-workflow-cli-3.6 affected Chainguard argo-workflow-cli-3.6 —
argo-workflow-cli-fips-3.6 affected Chainguard argo-workflow-cli-fips-3.6 —
argo-workflow-controller-3.6 affected Chainguard argo-workflow-controller-3.6 —
argo-workflow-controller-3.6-compat-fips affected Chainguard argo-workflow-controller-3.6-compat-fips —
argo-workflow-controller-3.7 affected Wolfi argo-workflow-controller-3.7 —
argo-workflow-controller-3.7 affected Chainguard argo-workflow-controller-3.7 —
argo-workflow-controller-fips-3.6 affected Chainguard argo-workflow-controller-fips-3.6 —
argo-workflow-controller-fips-3.7 affected Chainguard argo-workflow-controller-fips-3.7 —
argo-workflow-executor-3.6-compat-fips affected Chainguard argo-workflow-executor-3.6-compat-fips —
argo-workflow-executor-3.7 affected Wolfi argo-workflow-executor-3.7 —
argo-workflow-executor-3.7 affected Chainguard argo-workflow-executor-3.7 —
argo-workflow-executor-fips-3.6 affected Chainguard argo-workflow-executor-fips-3.6 —
argo-workflow-executor-fips-3.7 affected Chainguard argo-workflow-executor-fips-3.7 —
argo-workflows-3.6 affected Chainguard argo-workflows-3.6 —
argo-workflows-3.7 affected Wolfi argo-workflows-3.7 —
argo-workflows-3.7 affected Chainguard argo-workflows-3.7 —
argo-workflows-fips-3.6 affected Chainguard argo-workflows-fips-3.6 —
argo-workflows-fips-3.7 affected Chainguard argo-workflows-fips-3.7 —
argo-workflows-known-hosts-fips-3.6 affected Chainguard argo-workflows-known-hosts-fips-3.6 —
argo-workflows-ui-3.6 affected Chainguard argo-workflows-ui-3.6 —
aws-otel-collector affected Chainguard aws-otel-collector —
aws-otel-collector affected Wolfi aws-otel-collector —
aws-otel-collector-compat affected Wolfi aws-otel-collector-compat —
aws-otel-collector-compat affected Chainguard aws-otel-collector-compat —
aws-otel-collector-fips affected Chainguard aws-otel-collector-fips —
aws-otel-collector-fips-healthcheck affected Chainguard aws-otel-collector-fips-healthcheck —
aws-otel-collector-healthcheck affected Wolfi aws-otel-collector-healthcheck —
aws-otel-collector-healthcheck affected Chainguard aws-otel-collector-healthcheck —
aws-otel-collector-healthcheck-fips affected Chainguard aws-otel-collector-healthcheck-fips —
coredns-1.12 affected Chainguard coredns-1.12 —
coredns-1.12-compat affected Chainguard coredns-1.12-compat —
coredns-1.13 affected Chainguard coredns-1.13 —
coredns-1.13 affected Wolfi coredns-1.13 —
coredns-fips-1.12 affected Chainguard coredns-fips-1.12 —
coredns-fips-1.13 affected Chainguard coredns-fips-1.13 —
datadog-agent-7.71-full affected Chainguard datadog-agent-7.71-full —
datadog-agent-7.72-full affected Chainguard datadog-agent-7.72-full —
datadog-agent-7.72-full affected Wolfi datadog-agent-7.72-full —
datadog-agent-7.73-full affected Wolfi datadog-agent-7.73-full —
datadog-agent-7.73-full affected Chainguard datadog-agent-7.73-full —
datadog-agent-fips-7.71-full affected Chainguard datadog-agent-fips-7.71-full —
datadog-agent-fips-7.73-full affected Chainguard datadog-agent-fips-7.73-full —
eks-distro-1.29 affected Chainguard eks-distro-1.29 —
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-1.33 affected Chainguard eks-distro-1.33 —
eks-distro-1.34 affected Chainguard eks-distro-1.34 —
eks-distro-coredns-1.29 affected Chainguard eks-distro-coredns-1.29 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-1.33 affected Chainguard eks-distro-coredns-1.33 —
eks-distro-coredns-1.34 affected Chainguard eks-distro-coredns-1.34 —
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-coredns-fips-1.31 affected Chainguard eks-distro-coredns-fips-1.31 —
eks-distro-coredns-fips-1.32 affected Chainguard eks-distro-coredns-fips-1.32 —
eks-distro-coredns-fips-1.33 affected Chainguard eks-distro-coredns-fips-1.33 —
eks-distro-coredns-fips-1.34 affected Chainguard eks-distro-coredns-fips-1.34 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-fips-1.31 affected Chainguard eks-distro-fips-1.31 —
eks-distro-fips-1.32 affected Chainguard eks-distro-fips-1.32 —
eks-distro-fips-1.33 affected Chainguard eks-distro-fips-1.33 —
eks-distro-fips-1.34 affected Chainguard eks-distro-fips-1.34 —
eks-distro-kube-apiserver-1.29 affected Chainguard eks-distro-kube-apiserver-1.29 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-1.33 affected Chainguard eks-distro-kube-apiserver-1.33 —
eks-distro-kube-apiserver-1.34 affected Chainguard eks-distro-kube-apiserver-1.34 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-apiserver-fips-1.31 affected Chainguard eks-distro-kube-apiserver-fips-1.31 —
eks-distro-kube-apiserver-fips-1.32 affected Chainguard eks-distro-kube-apiserver-fips-1.32 —
eks-distro-kube-apiserver-fips-1.33 affected Chainguard eks-distro-kube-apiserver-fips-1.33 —
eks-distro-kube-apiserver-fips-1.34 affected Chainguard eks-distro-kube-apiserver-fips-1.34 —
eks-distro-kube-controller-manager-1.29 affected Chainguard eks-distro-kube-controller-manager-1.29 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-1.33 affected Chainguard eks-distro-kube-controller-manager-1.33 —
eks-distro-kube-controller-manager-1.34 affected Chainguard eks-distro-kube-controller-manager-1.34 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.31 affected Chainguard eks-distro-kube-controller-manager-fips-1.31 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-controller-manager-fips-1.33 affected Chainguard eks-distro-kube-controller-manager-fips-1.33 —
eks-distro-kube-controller-manager-fips-1.34 affected Chainguard eks-distro-kube-controller-manager-fips-1.34 —
eks-distro-kube-proxy-1.29 affected Chainguard eks-distro-kube-proxy-1.29 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-1.32 affected Chainguard eks-distro-kube-proxy-1.32 —
eks-distro-kube-proxy-1.33 affected Chainguard eks-distro-kube-proxy-1.33 —
eks-distro-kube-proxy-1.34 affected Chainguard eks-distro-kube-proxy-1.34 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-proxy-fips-1.31 affected Chainguard eks-distro-kube-proxy-fips-1.31 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kube-proxy-fips-1.33 affected Chainguard eks-distro-kube-proxy-fips-1.33 —
eks-distro-kube-proxy-fips-1.34 affected Chainguard eks-distro-kube-proxy-fips-1.34 —
eks-distro-kubernetes-csi-external-attacher-1.29 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.29 —
eks-distro-kubernetes-csi-external-attacher-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.30 —
eks-distro-kubernetes-csi-external-attacher-1.31 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.31 —
eks-distro-kubernetes-csi-external-attacher-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.32 —
eks-distro-kubernetes-csi-external-attacher-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.33 —
eks-distro-kubernetes-csi-external-attacher-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.29 —
eks-distro-kubernetes-csi-external-attacher-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.30 —
eks-distro-kubernetes-csi-external-attacher-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.31 —
eks-distro-kubernetes-csi-external-attacher-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.32 —
eks-distro-kubernetes-csi-external-attacher-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.33 —
eks-distro-kubernetes-csi-external-provisioner-1.29 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.29 —
eks-distro-kubernetes-csi-external-provisioner-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.31 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.31 —
eks-distro-kubernetes-csi-external-provisioner-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.32 —
eks-distro-kubernetes-csi-external-provisioner-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.33 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.29 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.30 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.31 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.32 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.33 —
eks-distro-kubernetes-csi-external-resizer-1.29 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.29 —
eks-distro-kubernetes-csi-external-resizer-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.31 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.31 —
eks-distro-kubernetes-csi-external-resizer-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.32 —
eks-distro-kubernetes-csi-external-resizer-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.33 —
eks-distro-kubernetes-csi-external-resizer-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.29 —
eks-distro-kubernetes-csi-external-resizer-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.30 —
eks-distro-kubernetes-csi-external-resizer-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.31 —
eks-distro-kubernetes-csi-external-resizer-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.32 —
eks-distro-kubernetes-csi-external-resizer-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.29 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.31 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.31 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.29 —
eks-distro-kubernetes-csi-external-snapshotter-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.31 —
eks-distro-kubernetes-csi-external-snapshotter-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.31 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.29 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.31 —
eks-distro-kubernetes-csi-livenessprobe-1.29 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.29 —
eks-distro-kubernetes-csi-livenessprobe-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.31 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.31 —
eks-distro-kubernetes-csi-livenessprobe-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.32 —
eks-distro-kubernetes-csi-livenessprobe-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.33 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.29 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.30 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.31 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.32 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-1.29 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.29 —
eks-distro-kubernetes-csi-node-driver-registrar-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.31 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.31 —
eks-distro-kubernetes-csi-node-driver-registrar-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.31 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.31 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 —
eks-distro-kubernetes-pause-1.29 affected Chainguard eks-distro-kubernetes-pause-1.29 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kubernetes-pause-1.32 affected Chainguard eks-distro-kubernetes-pause-1.32 —
eks-distro-kubernetes-pause-1.33 affected Chainguard eks-distro-kubernetes-pause-1.33 —
eks-distro-kubernetes-pause-1.34 affected Chainguard eks-distro-kubernetes-pause-1.34 —
eks-distro-kubernetes-pause-compat-1.29 affected Chainguard eks-distro-kubernetes-pause-compat-1.29 —
eks-distro-kubernetes-pause-compat-1.30 affected Chainguard eks-distro-kubernetes-pause-compat-1.30 —
eks-distro-kubernetes-pause-compat-1.31 affected Chainguard eks-distro-kubernetes-pause-compat-1.31 —
eks-distro-kube-scheduler-1.29 affected Chainguard eks-distro-kube-scheduler-1.29 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-1.33 affected Chainguard eks-distro-kube-scheduler-1.33 —
eks-distro-kube-scheduler-1.34 affected Chainguard eks-distro-kube-scheduler-1.34 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
eks-distro-kube-scheduler-fips-1.31 affected Chainguard eks-distro-kube-scheduler-fips-1.31 —
eks-distro-kube-scheduler-fips-1.32 affected Chainguard eks-distro-kube-scheduler-fips-1.32 —
eks-distro-kube-scheduler-fips-1.33 affected Chainguard eks-distro-kube-scheduler-fips-1.33 —
eks-distro-kube-scheduler-fips-1.34 affected Chainguard eks-distro-kube-scheduler-fips-1.34 —
elastic-agent affected Chainguard elastic-agent —
elastic-agent-8.17 affected Chainguard elastic-agent-8.17 —
elastic-agent-8.18 affected Chainguard elastic-agent-8.18 —
elastic-agent-9.0 affected Chainguard elastic-agent-9.0 —
elastic-agent-fips-8.17 affected Chainguard elastic-agent-fips-8.17 —
elastic-agent-fips-8.18 affected Chainguard elastic-agent-fips-8.18 —
elastic-agent-fips-8.19 affected Chainguard elastic-agent-fips-8.19 —
elastic-agent-fips-9.0 affected Chainguard elastic-agent-fips-9.0 —
elastic-otel-collector-9.3 affected Chainguard elastic-otel-collector-9.3 —
elastic-otel-collector-fips-9.3 affected Chainguard elastic-otel-collector-fips-9.3 —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
jaeger-1-jaeger affected Chainguard jaeger-1-jaeger —
jaeger-2-anonymizer-compat affected Wolfi jaeger-2-anonymizer-compat —
jaeger-2-anonymizer-compat affected Chainguard jaeger-2-anonymizer-compat —
jaeger-2-collector-compat affected Wolfi jaeger-2-collector-compat —
jaeger-2-collector-compat affected Chainguard jaeger-2-collector-compat —
jaeger-2-es-index-cleaner affected Wolfi jaeger-2-es-index-cleaner —
jaeger-2-es-index-cleaner affected Chainguard jaeger-2-es-index-cleaner —
jaeger-2-es-index-cleaner-compat affected Wolfi jaeger-2-es-index-cleaner-compat —
jaeger-2-es-index-cleaner-compat affected Chainguard jaeger-2-es-index-cleaner-compat —
jaeger-2-esmapping-generator affected Chainguard jaeger-2-esmapping-generator —
jaeger-2-esmapping-generator affected Wolfi jaeger-2-esmapping-generator —
jaeger-2-esmapping-generator-compat affected Chainguard jaeger-2-esmapping-generator-compat —
jaeger-2-esmapping-generator-compat affected Wolfi jaeger-2-esmapping-generator-compat —
jaeger-2-es-rollover affected Chainguard jaeger-2-es-rollover —
jaeger-2-es-rollover affected Wolfi jaeger-2-es-rollover —
jaeger-2-fips-all-in-one affected Chainguard jaeger-2-fips-all-in-one —
jaeger-2-fips-anonymizer affected Chainguard jaeger-2-fips-anonymizer —
jaeger-2-fips-collector affected Chainguard jaeger-2-fips-collector —
jaeger-2-fips-es-index-cleaner affected Chainguard jaeger-2-fips-es-index-cleaner —
jaeger-2-fips-esmapping-generator affected Chainguard jaeger-2-fips-esmapping-generator —
jaeger-2-fips-es-rollover affected Chainguard jaeger-2-fips-es-rollover —
jaeger-2-fips-iamguarded-cassandra-schema affected Chainguard jaeger-2-fips-iamguarded-cassandra-schema —
jaeger-2-fips-iamguarded-compat affected Chainguard jaeger-2-fips-iamguarded-compat —
jaeger-2-fips-ingester affected Chainguard jaeger-2-fips-ingester —
jaeger-2-fips-jaeger affected Chainguard jaeger-2-fips-jaeger —
jaeger-2-fips-query affected Chainguard jaeger-2-fips-query —
jaeger-2-fips-remote-storage affected Chainguard jaeger-2-fips-remote-storage —
jaeger-2-fips-tracegen affected Chainguard jaeger-2-fips-tracegen —
jaeger-2-iamguarded-cassandra-schema affected Chainguard jaeger-2-iamguarded-cassandra-schema —
jaeger-2-iamguarded-cassandra-schema affected Wolfi jaeger-2-iamguarded-cassandra-schema —
jaeger-2-ingester affected Wolfi jaeger-2-ingester —
jaeger-2-ingester affected Chainguard jaeger-2-ingester —
jaeger-2-jaeger affected Chainguard jaeger-2-jaeger —
jaeger-2-jaeger affected Wolfi jaeger-2-jaeger —
jaeger-2-jaeger-compat affected Chainguard jaeger-2-jaeger-compat —
jaeger-2-jaeger-compat affected Wolfi jaeger-2-jaeger-compat —
jaeger-2-query affected Chainguard jaeger-2-query —
jaeger-2-query affected Wolfi jaeger-2-query —
jaeger-2-query-compat affected Chainguard jaeger-2-query-compat —
jaeger-2-query-compat affected Wolfi jaeger-2-query-compat —
jaeger-2-remote-storage-compat affected Chainguard jaeger-2-remote-storage-compat —
jaeger-2-remote-storage-compat affected Wolfi jaeger-2-remote-storage-compat —
jaeger-2-tracegen affected Chainguard jaeger-2-tracegen —
jaeger-2-tracegen affected Wolfi jaeger-2-tracegen —
jaeger-2-tracegen-compat affected Chainguard jaeger-2-tracegen-compat —
jaeger-2-tracegen-compat affected Wolfi jaeger-2-tracegen-compat —
k3s affected Wolfi k3s —
k3s affected Chainguard k3s —
k3s-1.32 affected Wolfi k3s-1.32 —
k3s-1.32 affected Chainguard k3s-1.32 —
k3s-1.33 affected Wolfi k3s-1.33 —
k3s-1.33 affected Chainguard k3s-1.33 —
k3s-embedded affected Chainguard k3s-embedded —
k3s-embedded affected Wolfi k3s-embedded —
k3s-images affected Wolfi k3s-images —
k3s-images affected Chainguard k3s-images —
k3s-multicall affected Chainguard k3s-multicall —
k3s-multicall affected Wolfi k3s-multicall —
k3s-multicall-1.32 affected Wolfi k3s-multicall-1.32 —
k3s-multicall-1.32 affected Chainguard k3s-multicall-1.32 —
k3s-static affected Chainguard k3s-static —
k3s-static affected Wolfi k3s-static —
k3s-static-1.32 affected Chainguard k3s-static-1.32 —
k3s-static-1.32 affected Wolfi k3s-static-1.32 —
k3s-static-1.33 affected Chainguard k3s-static-1.33 —
k3s-static-1.33 affected Wolfi k3s-static-1.33 —
k8s_gateway affected Chainguard k8s_gateway —
k8s_gateway affected Wolfi k8s_gateway —
k8s_gateway-compat affected Chainguard k8s_gateway-compat —
k8s_gateway-compat affected Wolfi k8s_gateway-compat —
k8s_gateway-fips affected Chainguard k8s_gateway-fips —
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
kargo affected Wolfi kargo —
kargo affected Chainguard kargo —
kargo-oci-compat affected Chainguard kargo-oci-compat —
kargo-oci-compat affected Wolfi kargo-oci-compat —
keda-2.16 affected Chainguard keda-2.16 —
keda-2.16 affected Wolfi keda-2.16 —
keda-2.16-metrics-apiserver affected Wolfi keda-2.16-metrics-apiserver —
keda-2.16-metrics-apiserver affected Chainguard keda-2.16-metrics-apiserver —
keda-2.17-admission-webhooks affected Chainguard keda-2.17-admission-webhooks —
keda-2.17-admission-webhooks affected Wolfi keda-2.17-admission-webhooks —
keda-2.18 affected Chainguard keda-2.18 —
keda-2.18 affected Wolfi keda-2.18 —
keda-2.18-admission-webhooks affected Wolfi keda-2.18-admission-webhooks —
keda-2.18-admission-webhooks affected Chainguard keda-2.18-admission-webhooks —
keda-2.18-metrics-apiserver affected Wolfi keda-2.18-metrics-apiserver —
keda-2.18-metrics-apiserver affected Chainguard keda-2.18-metrics-apiserver —
keda-fips-2.16-metrics-apiserver affected Chainguard keda-fips-2.16-metrics-apiserver —
keda-fips-2.17-metrics-apiserver affected Chainguard keda-fips-2.17-metrics-apiserver —
keda-fips-2.18 affected Chainguard keda-fips-2.18 —
keda-fips-2.18-admission-webhooks affected Chainguard keda-fips-2.18-admission-webhooks —
keda-fips-2.18-compat affected Chainguard keda-fips-2.18-compat —
keda-fips-2.18-metrics-apiserver affected Chainguard keda-fips-2.18-metrics-apiserver —
kine affected Chainguard kine —
kine affected Wolfi kine —
kserve affected Chainguard kserve —
kserve affected Wolfi kserve —
kserve-agent affected Wolfi kserve-agent —
kserve-agent affected Chainguard kserve-agent —
kserve-agent-compat affected Chainguard kserve-agent-compat —
kserve-agent-compat affected Wolfi kserve-agent-compat —
kserve-manager affected Wolfi kserve-manager —
kserve-manager affected Chainguard kserve-manager —
kserve-manager-compat affected Chainguard kserve-manager-compat —
kserve-manager-compat affected Wolfi kserve-manager-compat —
kserve-qpext affected Chainguard kserve-qpext —
kserve-qpext affected Wolfi kserve-qpext —
kserve-qpext-compat affected Chainguard kserve-qpext-compat —
kserve-qpext-compat affected Wolfi kserve-qpext-compat —
kserve-router affected Wolfi kserve-router —
kserve-router affected Chainguard kserve-router —
kserve-router-compat affected Chainguard kserve-router-compat —
kserve-router-compat affected Wolfi kserve-router-compat —
kserve-storage-controller affected Wolfi kserve-storage-controller —
kserve-storage-controller affected Chainguard kserve-storage-controller —
kubectl-argo-rollouts affected Wolfi kubectl-argo-rollouts —
kubectl-argo-rollouts affected Chainguard kubectl-argo-rollouts —
kubectl-argo-rollouts-fips affected Chainguard kubectl-argo-rollouts-fips —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kuma-coredns-1.12 affected Chainguard kuma-coredns-1.12 —
nats affected Wolfi nats —
nats affected Chainguard nats —
nats-fips affected Chainguard nats-fips —
nrdot-collector-k8s affected Chainguard nrdot-collector-k8s —
nrdot-collector-k8s-compat affected Chainguard nrdot-collector-k8s-compat —
nrdot-collector-k8s-fips affected Chainguard nrdot-collector-k8s-fips —
opentelemetry-collector affected Chainguard opentelemetry-collector —
opentelemetry-collector affected Wolfi opentelemetry-collector —
opentelemetry-collector-compat affected Wolfi opentelemetry-collector-compat —
opentelemetry-collector-compat affected Chainguard opentelemetry-collector-compat —
opentelemetry-collector-contrib affected Wolfi opentelemetry-collector-contrib —
opentelemetry-collector-contrib affected Chainguard opentelemetry-collector-contrib —
opentelemetry-collector-contrib-fips affected Chainguard opentelemetry-collector-contrib-fips —
opentelemetry-collector-fips affected Chainguard opentelemetry-collector-fips —
opentelemetry-collector-ocb affected Wolfi opentelemetry-collector-ocb —
opentelemetry-collector-ocb affected Chainguard opentelemetry-collector-ocb —
opentelemetry-collector-ocb-fips affected Chainguard opentelemetry-collector-ocb-fips —
rke2-runtime-1.31 affected Chainguard rke2-runtime-1.31 —
rke2-runtime-1.32 affected Chainguard rke2-runtime-1.32 —
rke2-runtime-1.33 affected Chainguard rke2-runtime-1.33 —
rke2-runtime-1.34 affected Chainguard rke2-runtime-1.34 —
rke2-runtime-1.34-charts affected Chainguard rke2-runtime-1.34-charts —
splunk-otel-collector affected Wolfi splunk-otel-collector —
splunk-otel-collector affected Chainguard splunk-otel-collector —
splunk-otel-collector-fips affected Chainguard splunk-otel-collector-fips —
tempo affected Chainguard tempo —
tempo affected Wolfi tempo —
tempo-cli affected Chainguard tempo-cli —
tempo-cli affected Wolfi tempo-cli —
tempo-fips affected Chainguard tempo-fips —
tempo-fips-cli affected Chainguard tempo-fips-cli —
tempo-fips-vulture affected Chainguard tempo-fips-vulture —
tempo-query affected Chainguard tempo-query —
tempo-query affected Wolfi tempo-query —
tempo-vulture affected Wolfi tempo-vulture —
tempo-vulture affected Chainguard tempo-vulture —
vale affected Chainguard vale —
vale affected Wolfi vale —
verticadb-operator affected Chainguard verticadb-operator —
verticadb-operator affected Wolfi verticadb-operator —
verticadb-operator-compat affected Chainguard verticadb-operator-compat —
verticadb-operator-compat affected Wolfi verticadb-operator-compat —
verticadb-operator-fips affected Chainguard verticadb-operator-fips —
verticadb-operator-fips-compat affected Chainguard verticadb-operator-fips-compat —
Upstream advisory

CGA-prjq-29mj-m4j7

Open SourceActive exploitation (sightings)2026-01-29

CGA-prjq-29mj-m4j7

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-2j5g-hwxh-c77x

Open SourceActive exploitation (sightings)2026-01-29

CGA-2j5g-hwxh-c77x

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-v9wj-7jhw-72r6

Open SourceActive exploitation (sightings)2026-01-29

CGA-v9wj-7jhw-72r6

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-8v7f-rmgq-rqrj

Open SourceActive exploitation (sightings)2026-01-29

CGA-8v7f-rmgq-rqrj

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-gvvq-974r-vfff

Open SourceActive exploitation (sightings)2026-01-28

CGA-gvvq-974r-vfff

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-proxy-1.32 affected Chainguard eks-distro-kube-proxy-1.32 —
eks-distro-kubernetes-pause-1.32 affected Chainguard eks-distro-kubernetes-pause-1.32 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
Upstream advisory

MINI-c7wq-3r7x-853x

Open SourceActive exploitation (sightings)2026-01-14

MINI-c7wq-3r7x-853x

Affected products

ProductStatusVendorPackageEcosystem
kubectl-1.31 affected MinimOS kubectl-1.31 —
kubectl-1.31-advanced-compat affected MinimOS kubectl-1.31-advanced-compat —
kubernetes-1.31 affected MinimOS kubernetes-1.31 —
Upstream advisory

MINI-cg9r-38q4-cv4q

Open SourceActive exploitation (sightings)2026-01-14

MINI-cg9r-38q4-cv4q

Affected products

ProductStatusVendorPackageEcosystem
kubectl-fips-1.31 affected MinimOS kubectl-fips-1.31 —
kubernetes-fips-1.31 affected MinimOS kubernetes-fips-1.31 —
Upstream advisory

CGA-qpfv-qmrf-52w5

Open SourceActive exploitation (sightings)2026-01-11

CGA-qpfv-qmrf-52w5

Affected products

ProductStatusVendorPackageEcosystem
argo-cd-3.0 affected Wolfi argo-cd-3.0 —
argo-cd-3.0 affected Chainguard argo-cd-3.0 —
argo-cd-3.0-compat affected Wolfi argo-cd-3.0-compat —
argo-cd-3.0-compat affected Chainguard argo-cd-3.0-compat —
argo-cd-3.0-iamguarded-compat affected Chainguard argo-cd-3.0-iamguarded-compat —
argo-cd-3.0-repo-server affected Wolfi argo-cd-3.0-repo-server —
argo-cd-3.0-repo-server affected Chainguard argo-cd-3.0-repo-server —
argo-cd-3.1 affected Chainguard argo-cd-3.1 —
argo-cd-3.1 affected Wolfi argo-cd-3.1 —
argo-cd-3.1-compat affected Chainguard argo-cd-3.1-compat —
argo-cd-3.1-compat affected Wolfi argo-cd-3.1-compat —
argo-cd-3.1-iamguarded-compat affected Chainguard argo-cd-3.1-iamguarded-compat —
argo-cd-3.1-repo-server affected Wolfi argo-cd-3.1-repo-server —
argo-cd-3.1-repo-server affected Chainguard argo-cd-3.1-repo-server —
argo-cd-3.2 affected Chainguard argo-cd-3.2 —
argo-cd-3.2 affected Wolfi argo-cd-3.2 —
argo-cd-3.2-compat affected Wolfi argo-cd-3.2-compat —
argo-cd-3.2-compat affected Chainguard argo-cd-3.2-compat —
argo-cd-3.2-iamguarded-compat affected Wolfi argo-cd-3.2-iamguarded-compat —
argo-cd-3.2-iamguarded-compat affected Chainguard argo-cd-3.2-iamguarded-compat —
argo-cd-3.2-repo-server affected Chainguard argo-cd-3.2-repo-server —
argo-cd-3.2-repo-server affected Wolfi argo-cd-3.2-repo-server —
argo-cd-fips-3.0 affected Chainguard argo-cd-fips-3.0 —
argo-cd-fips-3.0-compat affected Chainguard argo-cd-fips-3.0-compat —
argo-cd-fips-3.1 affected Chainguard argo-cd-fips-3.1 —
argo-cd-fips-3.1-compat affected Chainguard argo-cd-fips-3.1-compat —
argo-cd-fips-3.1-iamguarded-compat affected Chainguard argo-cd-fips-3.1-iamguarded-compat —
argo-cd-fips-3.1-repo-server affected Chainguard argo-cd-fips-3.1-repo-server —
argo-cd-fips-3.2-compat affected Chainguard argo-cd-fips-3.2-compat —
argocd-image-updater affected Wolfi argocd-image-updater —
argocd-image-updater affected Chainguard argocd-image-updater —
argocd-image-updater-compat affected Chainguard argocd-image-updater-compat —
argocd-image-updater-compat affected Wolfi argocd-image-updater-compat —
argocd-image-updater-fips affected Chainguard argocd-image-updater-fips —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
azuredisk-csi-1.32 affected Chainguard azuredisk-csi-1.32 —
azuredisk-csi-1.33 affected Wolfi azuredisk-csi-1.33 —
azuredisk-csi-1.33 affected Chainguard azuredisk-csi-1.33 —
azuredisk-csi-1.33-compat affected Chainguard azuredisk-csi-1.33-compat —
azuredisk-csi-1.33-compat affected Wolfi azuredisk-csi-1.33-compat —
azuredisk-csi-fips-1.32 affected Chainguard azuredisk-csi-fips-1.32 —
azuredisk-csi-fips-1.33 affected Chainguard azuredisk-csi-fips-1.33 —
azurefile-csi-1.32 affected Wolfi azurefile-csi-1.32 —
azurefile-csi-1.32 affected Chainguard azurefile-csi-1.32 —
azurefile-csi-1.33 affected Chainguard azurefile-csi-1.33 —
azurefile-csi-1.33 affected Wolfi azurefile-csi-1.33 —
azurefile-csi-1.33-compat affected Wolfi azurefile-csi-1.33-compat —
azurefile-csi-1.33-compat affected Chainguard azurefile-csi-1.33-compat —
azurefile-csi-1.34 affected Chainguard azurefile-csi-1.34 —
azurefile-csi-1.34 affected Wolfi azurefile-csi-1.34 —
azurefile-csi-1.34-compat affected Chainguard azurefile-csi-1.34-compat —
azurefile-csi-1.34-compat affected Wolfi azurefile-csi-1.34-compat —
azurefile-csi-fips-1.32 affected Chainguard azurefile-csi-fips-1.32 —
azurefile-csi-fips-1.33 affected Chainguard azurefile-csi-fips-1.33 —
azurefile-csi-fips-1.34 affected Chainguard azurefile-csi-fips-1.34 —
azurefile-csi-fips-1.34-compat affected Chainguard azurefile-csi-fips-1.34-compat —
blob-csi-1.23 affected Chainguard blob-csi-1.23 —
blob-csi-1.23-compat affected Chainguard blob-csi-1.23-compat —
blob-csi-1.24 affected Chainguard blob-csi-1.24 —
blob-csi-1.24-compat affected Chainguard blob-csi-1.24-compat —
blob-csi-1.25 affected Chainguard blob-csi-1.25 —
blob-csi-1.25-compat affected Chainguard blob-csi-1.25-compat —
blob-csi-1.26 affected Chainguard blob-csi-1.26 —
blob-csi-1.26 affected Wolfi blob-csi-1.26 —
blob-csi-1.26-compat affected Chainguard blob-csi-1.26-compat —
blob-csi-1.26-compat affected Wolfi blob-csi-1.26-compat —
blob-csi-1.27 affected Chainguard blob-csi-1.27 —
blob-csi-1.27 affected Wolfi blob-csi-1.27 —
blob-csi-fips-1.23 affected Chainguard blob-csi-fips-1.23 —
blob-csi-fips-1.23-compat affected Chainguard blob-csi-fips-1.23-compat —
blob-csi-fips-1.24 affected Chainguard blob-csi-fips-1.24 —
blob-csi-fips-1.24-compat affected Chainguard blob-csi-fips-1.24-compat —
blob-csi-fips-1.25 affected Chainguard blob-csi-fips-1.25 —
blob-csi-fips-1.25-compat affected Chainguard blob-csi-fips-1.25-compat —
blob-csi-fips-1.26 affected Chainguard blob-csi-fips-1.26 —
blob-csi-fips-1.26-compat affected Chainguard blob-csi-fips-1.26-compat —
blob-csi-fips-1.27 affected Chainguard blob-csi-fips-1.27 —
blob-csi-fips-1.27-compat affected Chainguard blob-csi-fips-1.27-compat —
calico-3.31 affected Wolfi calico-3.31 —
calico-3.31 affected Chainguard calico-3.31 —
calico-apiserver-3.30 affected Wolfi calico-apiserver-3.30 —
calico-apiserver-3.30 affected Chainguard calico-apiserver-3.30 —
calico-apiserver-3.31 affected Wolfi calico-apiserver-3.31 —
calico-apiserver-3.31 affected Chainguard calico-apiserver-3.31 —
calico-apiserver-compat-3.31 affected Chainguard calico-apiserver-compat-3.31 —
calico-apiserver-compat-3.31 affected Wolfi calico-apiserver-compat-3.31 —
calico-app-policy-3.30 affected Wolfi calico-app-policy-3.30 —
calico-app-policy-3.30 affected Chainguard calico-app-policy-3.30 —
calico-app-policy-3.31 affected Chainguard calico-app-policy-3.31 —
calico-app-policy-3.31 affected Wolfi calico-app-policy-3.31 —
calico-app-policy-fips-3.30 affected Chainguard calico-app-policy-fips-3.30 —
calico-app-policy-fips-3.31 affected Chainguard calico-app-policy-fips-3.31 —
calico-cni-3.31 affected Wolfi calico-cni-3.31 —
calico-cni-3.31 affected Chainguard calico-cni-3.31 —
calico-cni-compat-3.31 affected Wolfi calico-cni-compat-3.31 —
calico-cni-compat-3.31 affected Chainguard calico-cni-compat-3.31 —
calicoctl-3.31 affected Chainguard calicoctl-3.31 —
calicoctl-3.31 affected Wolfi calicoctl-3.31 —
calico-felix-3.31 affected Chainguard calico-felix-3.31 —
calico-felix-3.31 affected Wolfi calico-felix-3.31 —
calico-goldmane-3.30 affected Wolfi calico-goldmane-3.30 —
calico-goldmane-3.30 affected Chainguard calico-goldmane-3.30 —
calico-goldmane-3.31 affected Chainguard calico-goldmane-3.31 —
calico-goldmane-3.31 affected Wolfi calico-goldmane-3.31 —
calico-goldmane-fips-3.31 affected Chainguard calico-goldmane-fips-3.31 —
calico-key-cert-provisioner-3.31 affected Wolfi calico-key-cert-provisioner-3.31 —
calico-key-cert-provisioner-3.31 affected Chainguard calico-key-cert-provisioner-3.31 —
calico-kube-controllers-3.31 affected Wolfi calico-kube-controllers-3.31 —
calico-kube-controllers-3.31 affected Chainguard calico-kube-controllers-3.31 —
calico-node-3.31 affected Chainguard calico-node-3.31 —
calico-node-3.31 affected Wolfi calico-node-3.31 —
calico-pod2daemon-3.31 affected Wolfi calico-pod2daemon-3.31 —
calico-pod2daemon-3.31 affected Chainguard calico-pod2daemon-3.31 —
calico-pod2daemon-flexvol-compat-3.31 affected Chainguard calico-pod2daemon-flexvol-compat-3.31 —
calico-pod2daemon-flexvol-compat-3.31 affected Wolfi calico-pod2daemon-flexvol-compat-3.31 —
calico-typha-client-3.31 affected Chainguard calico-typha-client-3.31 —
calico-typha-client-3.31 affected Wolfi calico-typha-client-3.31 —
calico-typhad-3.31 affected Chainguard calico-typhad-3.31 —
calico-typhad-3.31 affected Wolfi calico-typhad-3.31 —
calico-whisker-3.31 affected Chainguard calico-whisker-3.31 —
calico-whisker-3.31 affected Wolfi calico-whisker-3.31 —
calico-whisker-backend-3.30 affected Wolfi calico-whisker-backend-3.30 —
calico-whisker-backend-3.30 affected Chainguard calico-whisker-backend-3.30 —
calico-whisker-backend-3.31 affected Chainguard calico-whisker-backend-3.31 —
calico-whisker-backend-3.31 affected Wolfi calico-whisker-backend-3.31 —
cephcsi affected Chainguard cephcsi —
cephcsi-fips affected Chainguard cephcsi-fips —
docker-machine-driver-harvester affected Wolfi docker-machine-driver-harvester —
docker-machine-driver-harvester affected Chainguard docker-machine-driver-harvester —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-1.33 affected Chainguard eks-distro-1.33 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-1.33 affected Chainguard eks-distro-coredns-1.33 —
eks-distro-coredns-fips-1.32 affected Chainguard eks-distro-coredns-fips-1.32 —
eks-distro-coredns-fips-1.33 affected Chainguard eks-distro-coredns-fips-1.33 —
eks-distro-fips-1.32 affected Chainguard eks-distro-fips-1.32 —
eks-distro-fips-1.33 affected Chainguard eks-distro-fips-1.33 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-1.33 affected Chainguard eks-distro-kube-apiserver-1.33 —
eks-distro-kube-apiserver-fips-1.32 affected Chainguard eks-distro-kube-apiserver-fips-1.32 —
eks-distro-kube-apiserver-fips-1.33 affected Chainguard eks-distro-kube-apiserver-fips-1.33 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-1.33 affected Chainguard eks-distro-kube-controller-manager-1.33 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-controller-manager-fips-1.33 affected Chainguard eks-distro-kube-controller-manager-fips-1.33 —
eks-distro-kube-proxy-1.32 affected Chainguard eks-distro-kube-proxy-1.32 —
eks-distro-kube-proxy-1.33 affected Chainguard eks-distro-kube-proxy-1.33 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kube-proxy-fips-1.33 affected Chainguard eks-distro-kube-proxy-fips-1.33 —
eks-distro-kubernetes-csi-external-attacher-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.32 —
eks-distro-kubernetes-csi-external-attacher-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.33 —
eks-distro-kubernetes-csi-external-attacher-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.32 —
eks-distro-kubernetes-csi-external-attacher-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.33 —
eks-distro-kubernetes-csi-external-provisioner-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.32 —
eks-distro-kubernetes-csi-external-provisioner-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.33 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.32 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.33 —
eks-distro-kubernetes-csi-external-resizer-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.32 —
eks-distro-kubernetes-csi-external-resizer-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.33 —
eks-distro-kubernetes-csi-external-resizer-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.32 —
eks-distro-kubernetes-csi-external-resizer-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 —
eks-distro-kubernetes-csi-livenessprobe-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.32 —
eks-distro-kubernetes-csi-livenessprobe-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.33 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.32 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 —
eks-distro-kubernetes-pause-1.32 affected Chainguard eks-distro-kubernetes-pause-1.32 —
eks-distro-kubernetes-pause-1.33 affected Chainguard eks-distro-kubernetes-pause-1.33 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-1.33 affected Chainguard eks-distro-kube-scheduler-1.33 —
eks-distro-kube-scheduler-fips-1.32 affected Chainguard eks-distro-kube-scheduler-fips-1.32 —
eks-distro-kube-scheduler-fips-1.33 affected Chainguard eks-distro-kube-scheduler-fips-1.33 —
emissary affected Chainguard emissary —
emissary affected Wolfi emissary —
emissary-apiext affected Wolfi emissary-apiext —
emissary-apiext affected Chainguard emissary-apiext —
emissary-oci-entrypoint affected Wolfi emissary-oci-entrypoint —
emissary-oci-entrypoint affected Chainguard emissary-oci-entrypoint —
ip-masq-agent affected Chainguard ip-masq-agent —
ip-masq-agent affected Wolfi ip-masq-agent —
kapp affected Wolfi kapp —
kapp affected Chainguard kapp —
kapp-fips affected Chainguard kapp-fips —
kots affected Chainguard kots —
kots affected Wolfi kots —
kubeadm-1.32 affected Wolfi kubeadm-1.32 —
kubeadm-1.32 affected Chainguard kubeadm-1.32 —
kubeadm-1.32-default affected Wolfi kubeadm-1.32-default —
kubeadm-1.32-default affected Chainguard kubeadm-1.32-default —
kubeadm-1.32-default-compat affected Chainguard kubeadm-1.32-default-compat —
kube-apiserver-1.32 affected Wolfi kube-apiserver-1.32 —
kube-apiserver-1.32 affected Chainguard kube-apiserver-1.32 —
kube-apiserver-1.32-default affected Chainguard kube-apiserver-1.32-default —
kube-apiserver-1.32-default affected Wolfi kube-apiserver-1.32-default —
kube-apiserver-1.32-default-compat affected Chainguard kube-apiserver-1.32-default-compat —
kube-controller-manager-1.32 affected Wolfi kube-controller-manager-1.32 —
kube-controller-manager-1.32 affected Chainguard kube-controller-manager-1.32 —
kube-controller-manager-1.32-default affected Wolfi kube-controller-manager-1.32-default —
kube-controller-manager-1.32-default affected Chainguard kube-controller-manager-1.32-default —
kube-controller-manager-1.32-default-compat affected Chainguard kube-controller-manager-1.32-default-compat —
kubectl-1.32 affected Wolfi kubectl-1.32 —
kubectl-1.32 affected Chainguard kubectl-1.32 —
kubectl-1.32-bitnami-compat affected Wolfi kubectl-1.32-bitnami-compat —
kubectl-1.32-bitnami-compat affected Chainguard kubectl-1.32-bitnami-compat —
kubectl-1.32-default affected Wolfi kubectl-1.32-default —
kubectl-1.32-default affected Chainguard kubectl-1.32-default —
kubectl-1.32-default-compat affected Chainguard kubectl-1.32-default-compat —
kubectl-1.32-iamguarded-compat affected Chainguard kubectl-1.32-iamguarded-compat —
kubectl-bash-completion-1.32 affected Wolfi kubectl-bash-completion-1.32 —
kubectl-bash-completion-1.32 affected Chainguard kubectl-bash-completion-1.32 —
kubelet-1.32 affected Wolfi kubelet-1.32 —
kubelet-1.32 affected Chainguard kubelet-1.32 —
kubelet-1.32-default affected Wolfi kubelet-1.32-default —
kubelet-1.32-default affected Chainguard kubelet-1.32-default —
kubelet-1.32-default-compat affected Chainguard kubelet-1.32-default-compat —
kube-proxy-1.32 affected Wolfi kube-proxy-1.32 —
kube-proxy-1.32 affected Chainguard kube-proxy-1.32 —
kube-proxy-1.32-default affected Chainguard kube-proxy-1.32-default —
kube-proxy-1.32-default affected Wolfi kube-proxy-1.32-default —
kube-proxy-1.32-default-compat affected Chainguard kube-proxy-1.32-default-compat —
kube-proxy-1.32-default-compat affected Wolfi kube-proxy-1.32-default-compat —
kubernetes-1.32 affected Chainguard kubernetes-1.32 —
kubernetes-1.32 affected Wolfi kubernetes-1.32 —
kubernetes-1.32-default affected Wolfi kubernetes-1.32-default —
kubernetes-1.32-default affected Chainguard kubernetes-1.32-default —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-nfs affected Wolfi kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs affected Chainguard kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs-fips affected Chainguard kubernetes-csi-driver-nfs-fips —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
kubernetes-pause-1.32 affected Wolfi kubernetes-pause-1.32 —
kubernetes-pause-1.32 affected Chainguard kubernetes-pause-1.32 —
kubernetes-pause-compat-1.32 affected Wolfi kubernetes-pause-compat-1.32 —
kubernetes-pause-compat-1.32 affected Chainguard kubernetes-pause-compat-1.32 —
kube-scheduler-1.32 affected Wolfi kube-scheduler-1.32 —
kube-scheduler-1.32 affected Chainguard kube-scheduler-1.32 —
kube-scheduler-1.32-default affected Wolfi kube-scheduler-1.32-default —
kube-scheduler-1.32-default affected Chainguard kube-scheduler-1.32-default —
kube-scheduler-1.32-default-compat affected Chainguard kube-scheduler-1.32-default-compat —
longhorn-manager-1.10 affected Chainguard longhorn-manager-1.10 —
longhorn-manager-1.10-compat affected Chainguard longhorn-manager-1.10-compat —
longhorn-manager-1.8 affected Chainguard longhorn-manager-1.8 —
longhorn-manager-1.8-compat affected Chainguard longhorn-manager-1.8-compat —
longhorn-manager-1.9 affected Chainguard longhorn-manager-1.9 —
longhorn-manager-1.9-compat affected Chainguard longhorn-manager-1.9-compat —
longhorn-manager-fips-1.10 affected Chainguard longhorn-manager-fips-1.10 —
longhorn-manager-fips-1.8 affected Chainguard longhorn-manager-fips-1.8 —
longhorn-manager-fips-1.9 affected Chainguard longhorn-manager-fips-1.9 —
longhorn-manager-fips-1.9-compat affected Chainguard longhorn-manager-fips-1.9-compat —
longhorn-share-manager-1.10 affected Chainguard longhorn-share-manager-1.10 —
longhorn-share-manager-1.10-compat affected Chainguard longhorn-share-manager-1.10-compat —
longhorn-share-manager-1.8 affected Chainguard longhorn-share-manager-1.8 —
longhorn-share-manager-1.8-compat affected Chainguard longhorn-share-manager-1.8-compat —
longhorn-share-manager-1.9 affected Chainguard longhorn-share-manager-1.9 —
longhorn-share-manager-1.9-compat affected Chainguard longhorn-share-manager-1.9-compat —
longhorn-share-manager-fips-1.10 affected Chainguard longhorn-share-manager-fips-1.10 —
longhorn-share-manager-fips-1.10-compat affected Chainguard longhorn-share-manager-fips-1.10-compat —
longhorn-share-manager-fips-1.8 affected Chainguard longhorn-share-manager-fips-1.8 —
longhorn-share-manager-fips-1.9 affected Chainguard longhorn-share-manager-fips-1.9 —
longhorn-share-manager-fips-1.9-compat affected Chainguard longhorn-share-manager-fips-1.9-compat —
mesosphere-vsphere-csi affected Wolfi mesosphere-vsphere-csi —
mesosphere-vsphere-csi affected Chainguard mesosphere-vsphere-csi —
mesosphere-vsphere-csi-driver affected Wolfi mesosphere-vsphere-csi-driver —
mesosphere-vsphere-csi-driver affected Chainguard mesosphere-vsphere-csi-driver —
mesosphere-vsphere-csi-syncer affected Chainguard mesosphere-vsphere-csi-syncer —
mesosphere-vsphere-csi-syncer affected Wolfi mesosphere-vsphere-csi-syncer —
node-feature-discovery-0.17 affected Wolfi node-feature-discovery-0.17 —
node-feature-discovery-0.17 affected Chainguard node-feature-discovery-0.17 —
node-feature-discovery-0.18 affected Wolfi node-feature-discovery-0.18 —
node-feature-discovery-0.18 affected Chainguard node-feature-discovery-0.18 —
node-feature-discovery-fips-0.17-master affected Chainguard node-feature-discovery-fips-0.17-master —
node-feature-discovery-fips-0.17-topology-updater affected Chainguard node-feature-discovery-fips-0.17-topology-updater —
node-feature-discovery-fips-0.18-worker affected Chainguard node-feature-discovery-fips-0.18-worker —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
py3.10-ambassador affected Chainguard py3.10-ambassador —
py3.10-ambassador affected Wolfi py3.10-ambassador —
py3.12-ambassador affected Wolfi py3.12-ambassador —
py3.12-ambassador affected Chainguard py3.12-ambassador —
rancher-2.11 affected Chainguard rancher-2.11 —
rancher-2.11 affected Wolfi rancher-2.11 —
rancher-2.12 affected Chainguard rancher-2.12 —
rancher-2.12 affected Wolfi rancher-2.12 —
rancher-2.13 affected Wolfi rancher-2.13 —
rancher-2.13 affected Chainguard rancher-2.13 —
rancher-agent-2.11 affected Wolfi rancher-agent-2.11 —
rancher-agent-2.11 affected Chainguard rancher-agent-2.11 —
rancher-agent-2.12 affected Wolfi rancher-agent-2.12 —
rancher-agent-2.12 affected Chainguard rancher-agent-2.12 —
rancher-agent-2.13 affected Wolfi rancher-agent-2.13 —
rancher-agent-2.13 affected Chainguard rancher-agent-2.13 —
rancher-support-bundle-kit affected Chainguard rancher-support-bundle-kit —
rancher-system-agent affected Wolfi rancher-system-agent —
rancher-system-agent affected Chainguard rancher-system-agent —
rancher-webhook-0.5 affected Wolfi rancher-webhook-0.5 —
rancher-webhook-0.5 affected Chainguard rancher-webhook-0.5 —
vc-controller-manager affected Chainguard vc-controller-manager —
vc-controller-manager-fips affected Chainguard vc-controller-manager-fips —
vcluster affected Wolfi vcluster —
vcluster affected Chainguard vcluster —
vcluster-syncer affected Chainguard vcluster-syncer —
vcluster-syncer affected Wolfi vcluster-syncer —
vc-scheduler affected Chainguard vc-scheduler —
yunikorn-k8shim affected Chainguard yunikorn-k8shim —
yunikorn-k8shim affected Wolfi yunikorn-k8shim —
yunikorn-k8shim-fips affected Chainguard yunikorn-k8shim-fips —
Upstream advisory

MINI-v2wg-j5hm-9h2v

Open SourceActive exploitation (sightings)2026-01-04

MINI-v2wg-j5hm-9h2v

Affected products

ProductStatusVendorPackageEcosystem
kube-apiserver-1.32 affected MinimOS kube-apiserver-1.32 —
kube-controller-manager-1.32 affected MinimOS kube-controller-manager-1.32 —
kubectl-1.32 affected MinimOS kubectl-1.32 —
kubectl-1.32-advanced-compat affected MinimOS kubectl-1.32-advanced-compat —
kube-proxy-1.32 affected MinimOS kube-proxy-1.32 —
kubernetes-1.32 affected MinimOS kubernetes-1.32 —
kube-scheduler-1.32 affected MinimOS kube-scheduler-1.32 —
Upstream advisory

CGA-hqww-gfqx-vhc3

Open SourceActive exploitation (sightings)2026-01-29

CGA-hqww-gfqx-vhc3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-h3gj-f857-hxr4

Open SourceActive exploitation (sightings)2026-01-29

CGA-h3gj-f857-hxr4

Affected products

ProductStatusVendorPackageEcosystem
conftest affected Chainguard conftest —
conftest affected Wolfi conftest —
conftest-fips affected Chainguard conftest-fips —
cosign affected Wolfi cosign —
cosign affected Chainguard cosign —
cosign-fips affected Wolfi cosign-fips —
cosign-fips affected Chainguard cosign-fips —
datadog-agent affected Wolfi datadog-agent —
datadog-agent affected Chainguard datadog-agent —
datadog-agent-core-integrations affected Chainguard datadog-agent-core-integrations —
datadog-agent-core-integrations affected Wolfi datadog-agent-core-integrations —
datadog-agent-core-integrations-fips affected Chainguard datadog-agent-core-integrations-fips —
datadog-agent-fakeintake affected Chainguard datadog-agent-fakeintake —
datadog-agent-fakeintake affected Wolfi datadog-agent-fakeintake —
datadog-agent-fakeintake-fips affected Chainguard datadog-agent-fakeintake-fips —
datadog-agent-fips affected Chainguard datadog-agent-fips —
datadog-agent-jmx affected Wolfi datadog-agent-jmx —
datadog-agent-jmx affected Chainguard datadog-agent-jmx —
datadog-agent-jmx-fips affected Chainguard datadog-agent-jmx-fips —
datadog-agent-oci-compat affected Chainguard datadog-agent-oci-compat —
datadog-agent-oci-compat affected Wolfi datadog-agent-oci-compat —
datadog-agent-oci-compat-fips affected Chainguard datadog-agent-oci-compat-fips —
datadog-agent-s6-overlay affected Chainguard datadog-agent-s6-overlay —
datadog-agent-s6-overlay affected Wolfi datadog-agent-s6-overlay —
datadog-agent-s6-overlay-fips affected Chainguard datadog-agent-s6-overlay-fips —
datadog-cluster-agent affected Wolfi datadog-cluster-agent —
datadog-cluster-agent affected Chainguard datadog-cluster-agent —
datadog-cluster-agent-fips affected Chainguard datadog-cluster-agent-fips —
datadog-cluster-agent-oci-compat affected Wolfi datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat affected Chainguard datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat-fips affected Chainguard datadog-cluster-agent-oci-compat-fips —
dogstatsd affected Chainguard dogstatsd —
dogstatsd affected Wolfi dogstatsd —
gatekeeper-3.17 affected Chainguard gatekeeper-3.17 —
gatekeeper-3.17 affected Wolfi gatekeeper-3.17 —
gatekeeper-3.17-compat affected Wolfi gatekeeper-3.17-compat —
gatekeeper-3.17-compat affected Chainguard gatekeeper-3.17-compat —
gatekeeper-3.17-crds affected Wolfi gatekeeper-3.17-crds —
gatekeeper-3.17-crds affected Chainguard gatekeeper-3.17-crds —
gatekeeper-3.17-crds-compat affected Chainguard gatekeeper-3.17-crds-compat —
gatekeeper-3.17-crds-compat affected Wolfi gatekeeper-3.17-crds-compat —
gatekeeper-3.17-gator affected Chainguard gatekeeper-3.17-gator —
gatekeeper-3.17-gator affected Wolfi gatekeeper-3.17-gator —
gatekeeper-fips-3.17 affected Chainguard gatekeeper-fips-3.17 —
gatekeeper-fips-3.17-compat affected Chainguard gatekeeper-fips-3.17-compat —
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
kots affected Wolfi kots —
kots affected Chainguard kots —
kots-compat affected Chainguard kots-compat —
kots-compat affected Wolfi kots-compat —
kots-symlink-compat affected Chainguard kots-symlink-compat —
kots-symlink-compat affected Wolfi kots-symlink-compat —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kyverno-1.11 affected Chainguard kyverno-1.11 —
kyverno-1.12 affected Wolfi kyverno-1.12 —
kyverno-1.12 affected Chainguard kyverno-1.12 —
kyverno-background-controller-1.11 affected Chainguard kyverno-background-controller-1.11 —
kyverno-background-controller-1.12 affected Wolfi kyverno-background-controller-1.12 —
kyverno-background-controller-1.12 affected Chainguard kyverno-background-controller-1.12 —
kyverno-background-controller-fips-1.11 affected Chainguard kyverno-background-controller-fips-1.11 —
kyverno-background-controller-fips-1.12 affected Chainguard kyverno-background-controller-fips-1.12 —
kyverno-cleanup-controller-1.11 affected Chainguard kyverno-cleanup-controller-1.11 —
kyverno-cleanup-controller-1.12 affected Chainguard kyverno-cleanup-controller-1.12 —
kyverno-cleanup-controller-1.12 affected Wolfi kyverno-cleanup-controller-1.12 —
kyverno-cleanup-controller-fips-1.11 affected Chainguard kyverno-cleanup-controller-fips-1.11 —
kyverno-cleanup-controller-fips-1.12 affected Chainguard kyverno-cleanup-controller-fips-1.12 —
kyverno-cli-1.11 affected Chainguard kyverno-cli-1.11 —
kyverno-cli-1.12 affected Wolfi kyverno-cli-1.12 —
kyverno-cli-1.12 affected Chainguard kyverno-cli-1.12 —
kyverno-cli-fips-1.11 affected Chainguard kyverno-cli-fips-1.11 —
kyverno-cli-fips-1.12 affected Chainguard kyverno-cli-fips-1.12 —
kyverno-fips-1.11 affected Chainguard kyverno-fips-1.11 —
kyverno-fips-1.12 affected Chainguard kyverno-fips-1.12 —
kyverno-init-container-1.11 affected Chainguard kyverno-init-container-1.11 —
kyverno-init-container-1.12 affected Wolfi kyverno-init-container-1.12 —
kyverno-init-container-1.12 affected Chainguard kyverno-init-container-1.12 —
kyverno-init-container-fips-1.11 affected Chainguard kyverno-init-container-fips-1.11 —
kyverno-init-container-fips-1.12 affected Chainguard kyverno-init-container-fips-1.12 —
kyverno-reports-controller-1.11 affected Chainguard kyverno-reports-controller-1.11 —
kyverno-reports-controller-1.12 affected Wolfi kyverno-reports-controller-1.12 —
kyverno-reports-controller-1.12 affected Chainguard kyverno-reports-controller-1.12 —
kyverno-reports-controller-fips-1.11 affected Chainguard kyverno-reports-controller-fips-1.11 —
kyverno-reports-controller-fips-1.12 affected Chainguard kyverno-reports-controller-fips-1.12 —
opa affected Chainguard opa —
opa affected Wolfi opa —
policy-controller affected Chainguard policy-controller —
policy-controller affected Wolfi policy-controller —
policy-controller-fips affected Chainguard policy-controller-fips —
policy-controller-tester affected Chainguard policy-controller-tester —
policy-controller-tester affected Wolfi policy-controller-tester —
policy-controller-tester-fips affected Chainguard policy-controller-tester-fips —
policy-controller-webhook affected Chainguard policy-controller-webhook —
policy-controller-webhook affected Wolfi policy-controller-webhook —
snyk-cli affected Chainguard snyk-cli —
snyk-cli affected Wolfi snyk-cli —
spire-agent affected Chainguard spire-agent —
spire-agent affected Wolfi spire-agent —
spire-agent-fips affected Chainguard spire-agent-fips —
spire-oidc-discovery-provider affected Wolfi spire-oidc-discovery-provider —
spire-oidc-discovery-provider affected Chainguard spire-oidc-discovery-provider —
spire-oidc-discovery-provider-fips affected Chainguard spire-oidc-discovery-provider-fips —
spire-server affected Wolfi spire-server —
spire-server affected Chainguard spire-server —
spire-server-fips affected Chainguard spire-server-fips —
tfsec affected Chainguard tfsec —
tfsec affected Wolfi tfsec —
zarf affected Chainguard zarf —
zarf affected Wolfi zarf —
zot affected Wolfi zot —
zot affected Chainguard zot —
Upstream advisory

CGA-5c66-w9qr-vj67

Open SourceActive exploitation (sightings)2026-01-28

CGA-5c66-w9qr-vj67

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
Upstream advisory

CGA-5343-mcq9-r7wm

Open SourceActive exploitation (sightings)2026-01-29

CGA-5343-mcq9-r7wm

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-f22x-cg72-3fcf

Open SourceActive exploitation (sightings)2026-01-28

CGA-f22x-cg72-3fcf

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-m8mx-pq7g-jhvv

Open SourceActive exploitation (sightings)2026-01-29

CGA-m8mx-pq7g-jhvv

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-563m-w32j-w882

Open SourceActive exploitation (sightings)2026-01-28

CGA-563m-w32j-w882

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-wcx6-xfwm-2p5p

Open SourceActive exploitation (sightings)2026-01-29

CGA-wcx6-xfwm-2p5p

Affected products

ProductStatusVendorPackageEcosystem
kubeflow-pipelines-visualization-server affected Wolfi kubeflow-pipelines-visualization-server —
kubeflow-pipelines-visualization-server affected Chainguard kubeflow-pipelines-visualization-server —
open-webui affected Wolfi open-webui —
open-webui affected Chainguard open-webui —
open-webui-compat affected Chainguard open-webui-compat —
open-webui-compat affected Wolfi open-webui-compat —
pgadmin4 affected Chainguard pgadmin4 —
pgadmin4-oci-entrypoint affected Chainguard pgadmin4-oci-entrypoint —
pgadmin4-pg12 affected Chainguard pgadmin4-pg12 —
pgadmin4-pg13 affected Chainguard pgadmin4-pg13 —
pgadmin4-pg14 affected Chainguard pgadmin4-pg14 —
pgadmin4-pg15 affected Chainguard pgadmin4-pg15 —
pgadmin4-pg16 affected Chainguard pgadmin4-pg16 —
pgadmin4-pg17 affected Chainguard pgadmin4-pg17 —
py3.10-torchvision-cuda-12.3 affected Chainguard py3.10-torchvision-cuda-12.3 —
py3.10-vllm-cuda-11.8 affected Chainguard py3.10-vllm-cuda-11.8 —
py3.10-vllm-cuda-12.4 affected Chainguard py3.10-vllm-cuda-12.4 —
py3.10-wheels-torchvision-cuda-12.3 affected Chainguard py3.10-wheels-torchvision-cuda-12.3 —
py3.10-wheels-vllm-cuda-11.8 affected Chainguard py3.10-wheels-vllm-cuda-11.8 —
py3.11-torchvision-cuda-12.3 affected Chainguard py3.11-torchvision-cuda-12.3 —
py3.11-wheels-torchvision-cuda-12.3 affected Chainguard py3.11-wheels-torchvision-cuda-12.3 —
py3.12-vllm-cuda-12.4 affected Chainguard py3.12-vllm-cuda-12.4 —
py3.9-torchvision-cuda-11.8 affected Chainguard py3.9-torchvision-cuda-11.8 —
py3.9-wheels-torchvision-cuda-11.8 affected Chainguard py3.9-wheels-torchvision-cuda-11.8 —
py3-vllm-cuda-12.4 affected Chainguard py3-vllm-cuda-12.4 —
superset affected Chainguard superset —
superset affected Wolfi superset —
superset-ci affected Wolfi superset-ci —
superset-ci affected Chainguard superset-ci —
superset-entrypoint affected Chainguard superset-entrypoint —
superset-entrypoint affected Wolfi superset-entrypoint —
superset-iamguarded-compat affected Chainguard superset-iamguarded-compat —
superset-iamguarded-compat affected Wolfi superset-iamguarded-compat —
tensorflow-cpu-jupyter affected Wolfi tensorflow-cpu-jupyter —
tensorflow-cpu-jupyter affected Chainguard tensorflow-cpu-jupyter —
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
tritonserver-backend-vllm-24.04 affected Chainguard tritonserver-backend-vllm-24.04 —
Upstream advisory

CGA-cjh4-x942-24fm

Open SourceActive exploitation (sightings)2026-01-28

CGA-cjh4-x942-24fm

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
Upstream advisory

CGA-2p6w-p9m6-c9pg

Open SourceActive exploitation (sightings)2026-01-28

CGA-2p6w-p9m6-c9pg

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-cpu-jupyter affected Chainguard tensorflow-cpu-jupyter —
tensorflow-cpu-jupyter affected Wolfi tensorflow-cpu-jupyter —
Upstream advisory

CGA-qcgp-9ffw-29x3

Open SourceActive exploitation (sightings)2026-01-29

CGA-qcgp-9ffw-29x3

Affected products

ProductStatusVendorPackageEcosystem
buildah affected Wolfi buildah —
buildah affected Chainguard buildah —
cadvisor affected Wolfi cadvisor —
cadvisor affected Chainguard cadvisor —
cadvisor-compat affected Wolfi cadvisor-compat —
cadvisor-compat affected Chainguard cadvisor-compat —
cadvisor-fips affected Chainguard cadvisor-fips —
cluster-autoscaler-1.31 affected Chainguard cluster-autoscaler-1.31 —
cluster-autoscaler-1.31 affected Wolfi cluster-autoscaler-1.31 —
cluster-autoscaler-1.31-compat affected Wolfi cluster-autoscaler-1.31-compat —
cluster-autoscaler-1.31-compat affected Chainguard cluster-autoscaler-1.31-compat —
cluster-autoscaler-fips-1.31 affected Chainguard cluster-autoscaler-fips-1.31 —
cluster-autoscaler-fips-1.31-compat affected Chainguard cluster-autoscaler-fips-1.31-compat —
ctop affected Wolfi ctop —
ctop affected Chainguard ctop —
docker affected Chainguard docker —
docker affected Wolfi docker —
docker-config-mirror-gcr affected Wolfi docker-config-mirror-gcr —
docker-config-mirror-gcr affected Chainguard docker-config-mirror-gcr —
dockerd affected Wolfi dockerd —
dockerd affected Chainguard dockerd —
docker-dind affected Chainguard docker-dind —
docker-dind affected Wolfi docker-dind —
docker-dind-compat affected Wolfi docker-dind-compat —
docker-dind-compat affected Chainguard docker-dind-compat —
dockerd-oci-entrypoint affected Wolfi dockerd-oci-entrypoint —
dockerd-oci-entrypoint affected Chainguard dockerd-oci-entrypoint —
dockerd-service affected Wolfi dockerd-service —
dockerd-service affected Chainguard dockerd-service —
docker-init affected Wolfi docker-init —
docker-init affected Chainguard docker-init —
docker-modprobe-compat affected Chainguard docker-modprobe-compat —
docker-modprobe-compat affected Wolfi docker-modprobe-compat —
docker-oci-entrypoint affected Chainguard docker-oci-entrypoint —
docker-oci-entrypoint affected Wolfi docker-oci-entrypoint —
docker-rootless affected Wolfi docker-rootless —
docker-rootless affected Chainguard docker-rootless —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-fips-1.31 affected Chainguard eks-distro-coredns-fips-1.31 —
eks-distro-fips-1.31 affected Chainguard eks-distro-fips-1.31 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-fips-1.31 affected Chainguard eks-distro-kube-apiserver-fips-1.31 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-fips-1.31 affected Chainguard eks-distro-kube-controller-manager-fips-1.31 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-fips-1.31 affected Chainguard eks-distro-kube-proxy-fips-1.31 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-fips-1.31 affected Chainguard eks-distro-kube-scheduler-fips-1.31 —
gosu-1.11 affected Chainguard gosu-1.11 —
gpu-feature-discovery affected Chainguard gpu-feature-discovery —
gpu-feature-discovery affected Wolfi gpu-feature-discovery —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
grype affected Chainguard grype —
grype affected Wolfi grype —
ingress-nginx-controller-1.10 affected Wolfi ingress-nginx-controller-1.10 —
ingress-nginx-controller-1.10 affected Chainguard ingress-nginx-controller-1.10 —
ingress-nginx-controller-1.10-compat affected Chainguard ingress-nginx-controller-1.10-compat —
ingress-nginx-controller-1.10-compat affected Wolfi ingress-nginx-controller-1.10-compat —
ingress-nginx-controller-1.10-kube-webhook-certgen affected Wolfi ingress-nginx-controller-1.10-kube-webhook-certgen —
ingress-nginx-controller-1.10-kube-webhook-certgen affected Chainguard ingress-nginx-controller-1.10-kube-webhook-certgen —
ingress-nginx-controller-1.11 affected Wolfi ingress-nginx-controller-1.11 —
ingress-nginx-controller-1.11 affected Chainguard ingress-nginx-controller-1.11 —
ingress-nginx-controller-1.11-compat affected Wolfi ingress-nginx-controller-1.11-compat —
ingress-nginx-controller-1.11-compat affected Chainguard ingress-nginx-controller-1.11-compat —
ingress-nginx-controller-1.11-kube-webhook-certgen affected Wolfi ingress-nginx-controller-1.11-kube-webhook-certgen —
ingress-nginx-controller-1.11-kube-webhook-certgen affected Chainguard ingress-nginx-controller-1.11-kube-webhook-certgen —
ingress-nginx-controller-bitnami-compat-1.10 affected Chainguard ingress-nginx-controller-bitnami-compat-1.10 —
ingress-nginx-controller-bitnami-compat-1.11 affected Chainguard ingress-nginx-controller-bitnami-compat-1.11 —
ingress-nginx-controller-compat-1.10 affected Chainguard ingress-nginx-controller-compat-1.10 —
ingress-nginx-controller-compat-1.11 affected Wolfi ingress-nginx-controller-compat-1.11 —
ingress-nginx-controller-compat-1.11 affected Chainguard ingress-nginx-controller-compat-1.11 —
ingress-nginx-controller-fips-1.10 affected Chainguard ingress-nginx-controller-fips-1.10 —
ingress-nginx-controller-fips-1.11 affected Chainguard ingress-nginx-controller-fips-1.11 —
ingress-nginx-controller-fips-bitnami-compat-1.11 affected Chainguard ingress-nginx-controller-fips-bitnami-compat-1.11 —
ingress-nginx-controller-fips-compat-1.11 affected Chainguard ingress-nginx-controller-fips-compat-1.11 —
ingress-nginx-controller-fips-iamguarded-compat-1.11 affected Chainguard ingress-nginx-controller-fips-iamguarded-compat-1.11 —
ingress-nginx-controller-iamguarded-compat-1.11 affected Chainguard ingress-nginx-controller-iamguarded-compat-1.11 —
ingress-nginx-custom-error-pages-1.10 affected Chainguard ingress-nginx-custom-error-pages-1.10 —
ingress-nginx-custom-error-pages-1.11 affected Chainguard ingress-nginx-custom-error-pages-1.11 —
ingress-nginx-custom-error-pages-compat-1.10 affected Chainguard ingress-nginx-custom-error-pages-compat-1.10 —
ingress-nginx-custom-error-pages-compat-1.11 affected Chainguard ingress-nginx-custom-error-pages-compat-1.11 —
ingress-nginx-custom-error-pages-fips-1.10 affected Chainguard ingress-nginx-custom-error-pages-fips-1.10 —
ingress-nginx-custom-error-pages-fips-1.11 affected Chainguard ingress-nginx-custom-error-pages-fips-1.11 —
ingress-nginx-fips-custom-error-pages-1.11 affected Chainguard ingress-nginx-fips-custom-error-pages-1.11 —
ingress-nginx-fips-custom-error-pages-compat-1.11 affected Chainguard ingress-nginx-fips-custom-error-pages-compat-1.11 —
ingress-nginx-fips-opentelemetry-plugin-1.11 affected Chainguard ingress-nginx-fips-opentelemetry-plugin-1.11 —
ingress-nginx-opentelemetry-1.11 affected Wolfi ingress-nginx-opentelemetry-1.11 —
ingress-nginx-opentelemetry-1.11 affected Chainguard ingress-nginx-opentelemetry-1.11 —
ingress-nginx-opentelemetry-compat-1.11 affected Wolfi ingress-nginx-opentelemetry-compat-1.11 —
ingress-nginx-opentelemetry-compat-1.11 affected Chainguard ingress-nginx-opentelemetry-compat-1.11 —
ingress-nginx-opentelemetry-plugin-1.10 affected Chainguard ingress-nginx-opentelemetry-plugin-1.10 —
ingress-nginx-opentelemetry-plugin-1.11 affected Chainguard ingress-nginx-opentelemetry-plugin-1.11 —
k3s affected Chainguard k3s —
k3s affected Wolfi k3s —
k3s-embedded affected Chainguard k3s-embedded —
k3s-embedded affected Wolfi k3s-embedded —
k3s-images affected Wolfi k3s-images —
k3s-images affected Chainguard k3s-images —
k3s-multicall affected Chainguard k3s-multicall —
k3s-multicall affected Wolfi k3s-multicall —
k3s-static affected Chainguard k3s-static —
k3s-static affected Wolfi k3s-static —
kubeadm-1.28 affected Wolfi kubeadm-1.28 —
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kubeadm-1.28-default affected Wolfi kubeadm-1.28-default —
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30 affected Wolfi kubeadm-1.30 —
kubeadm-1.30-default affected Wolfi kubeadm-1.30-default —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kubeadm-1.30-default-compat affected Chainguard kubeadm-1.30-default-compat —
kubeadm-1.31 affected Chainguard kubeadm-1.31 —
kubeadm-1.31 affected Wolfi kubeadm-1.31 —
kubeadm-1.31-default affected Wolfi kubeadm-1.31-default —
kubeadm-1.31-default affected Chainguard kubeadm-1.31-default —
kubeadm-1.31-default-compat affected Chainguard kubeadm-1.31-default-compat —
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kubeadm-fips-1.30-default-compat affected Chainguard kubeadm-fips-1.30-default-compat —
kubeadm-fips-1.31 affected Chainguard kubeadm-fips-1.31 —
kubeadm-fips-1.31-default affected Chainguard kubeadm-fips-1.31-default —
kubeadm-fips-1.31-default-compat affected Chainguard kubeadm-fips-1.31-default-compat —
kube-apiserver-1.28 affected Wolfi kube-apiserver-1.28 —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Wolfi kube-apiserver-1.28-default —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-apiserver-1.30 affected Wolfi kube-apiserver-1.30 —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Wolfi kube-apiserver-1.30-default —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-apiserver-1.30-default-compat affected Chainguard kube-apiserver-1.30-default-compat —
kube-apiserver-1.31 affected Chainguard kube-apiserver-1.31 —
kube-apiserver-1.31 affected Wolfi kube-apiserver-1.31 —
kube-apiserver-1.31-default affected Chainguard kube-apiserver-1.31-default —
kube-apiserver-1.31-default affected Wolfi kube-apiserver-1.31-default —
kube-apiserver-1.31-default-compat affected Chainguard kube-apiserver-1.31-default-compat —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-apiserver-fips-1.30-default-compat affected Chainguard kube-apiserver-fips-1.30-default-compat —
kube-apiserver-fips-1.31 affected Chainguard kube-apiserver-fips-1.31 —
kube-apiserver-fips-1.31-default affected Chainguard kube-apiserver-fips-1.31-default —
kube-apiserver-fips-1.31-default-compat affected Chainguard kube-apiserver-fips-1.31-default-compat —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28 affected Wolfi kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kube-controller-manager-1.28-default affected Wolfi kube-controller-manager-1.28-default —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30 affected Wolfi kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Wolfi kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default-compat affected Chainguard kube-controller-manager-1.30-default-compat —
kube-controller-manager-1.31 affected Wolfi kube-controller-manager-1.31 —
kube-controller-manager-1.31 affected Chainguard kube-controller-manager-1.31 —
kube-controller-manager-1.31-default affected Chainguard kube-controller-manager-1.31-default —
kube-controller-manager-1.31-default affected Wolfi kube-controller-manager-1.31-default —
kube-controller-manager-1.31-default-compat affected Chainguard kube-controller-manager-1.31-default-compat —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kube-controller-manager-fips-1.30-default-compat affected Chainguard kube-controller-manager-fips-1.30-default-compat —
kube-controller-manager-fips-1.31 affected Chainguard kube-controller-manager-fips-1.31 —
kube-controller-manager-fips-1.31-default affected Chainguard kube-controller-manager-fips-1.31-default —
kube-controller-manager-fips-1.31-default-compat affected Chainguard kube-controller-manager-fips-1.31-default-compat —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28 affected Wolfi kubectl-1.28 —
kubectl-1.28-bitnami-compat affected Chainguard kubectl-1.28-bitnami-compat —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-1.28-default affected Wolfi kubectl-1.28-default —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-1.29-iamguarded-compat affected Chainguard kubectl-1.29-iamguarded-compat —
kubectl-1.30 affected Wolfi kubectl-1.30 —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-1.30-default affected Wolfi kubectl-1.30-default —
kubectl-1.30-default-compat affected Chainguard kubectl-1.30-default-compat —
kubectl-1.30-iamguarded-compat affected Chainguard kubectl-1.30-iamguarded-compat —
kubectl-1.31 affected Chainguard kubectl-1.31 —
kubectl-1.31 affected Wolfi kubectl-1.31 —
kubectl-1.31-default affected Chainguard kubectl-1.31-default —
kubectl-1.31-default affected Wolfi kubectl-1.31-default —
kubectl-1.31-default-compat affected Chainguard kubectl-1.31-default-compat —
kubectl-1.31-iamguarded-compat affected Chainguard kubectl-1.31-iamguarded-compat —
kubectl-bash-completion-1.28 affected Wolfi kubectl-bash-completion-1.28 —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.30 affected Wolfi kubectl-bash-completion-1.30 —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubectl-bash-completion-1.31 affected Chainguard kubectl-bash-completion-1.31 —
kubectl-bash-completion-1.31 affected Wolfi kubectl-bash-completion-1.31 —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-bash-completion-fips-1.31 affected Chainguard kubectl-bash-completion-fips-1.31 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubectl-fips-1.30-default-compat affected Chainguard kubectl-fips-1.30-default-compat —
kubectl-fips-1.31 affected Chainguard kubectl-fips-1.31 —
kubectl-fips-1.31-default affected Chainguard kubectl-fips-1.31-default —
kubectl-fips-1.31-default-compat affected Chainguard kubectl-fips-1.31-default-compat —
kubelet-1.28 affected Wolfi kubelet-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kubelet-1.28-default affected Wolfi kubelet-1.28-default —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kubelet-1.30 affected Wolfi kubelet-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kubelet-1.30-default affected Wolfi kubelet-1.30-default —
kubelet-1.30-default-compat affected Chainguard kubelet-1.30-default-compat —
kubelet-1.31 affected Chainguard kubelet-1.31 —
kubelet-1.31 affected Wolfi kubelet-1.31 —
kubelet-1.31-default affected Chainguard kubelet-1.31-default —
kubelet-1.31-default affected Wolfi kubelet-1.31-default —
kubelet-1.31-default-compat affected Chainguard kubelet-1.31-default-compat —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kubelet-fips-1.30-default-compat affected Chainguard kubelet-fips-1.30-default-compat —
kubelet-fips-1.31 affected Chainguard kubelet-fips-1.31 —
kubelet-fips-1.31-default affected Chainguard kubelet-fips-1.31-default —
kubelet-fips-1.31-default-compat affected Chainguard kubelet-fips-1.31-default-compat —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28 affected Wolfi kube-proxy-1.28 —
kube-proxy-1.28-default affected Wolfi kube-proxy-1.28-default —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kube-proxy-1.28-default-compat affected Chainguard kube-proxy-1.28-default-compat —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30 affected Wolfi kube-proxy-1.30 —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default affected Wolfi kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kube-proxy-1.31 affected Wolfi kube-proxy-1.31 —
kube-proxy-1.31 affected Chainguard kube-proxy-1.31 —
kube-proxy-1.31-default affected Chainguard kube-proxy-1.31-default —
kube-proxy-1.31-default affected Wolfi kube-proxy-1.31-default —
kube-proxy-1.31-default-compat affected Chainguard kube-proxy-1.31-default-compat —
kube-proxy-1.31-default-compat affected Wolfi kube-proxy-1.31-default-compat —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kube-proxy-fips-1.30-default-compat affected Chainguard kube-proxy-fips-1.30-default-compat —
kube-proxy-fips-1.31 affected Chainguard kube-proxy-fips-1.31 —
kube-proxy-fips-1.31-default affected Chainguard kube-proxy-fips-1.31-default —
kube-proxy-fips-1.31-default-compat affected Chainguard kube-proxy-fips-1.31-default-compat —
kubernetes-1.28 affected Wolfi kubernetes-1.28 —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Wolfi kubernetes-1.28-default —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kubernetes-1.30 affected Wolfi kubernetes-1.30 —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-1.30-default affected Wolfi kubernetes-1.30-default —
kubernetes-1.31 affected Chainguard kubernetes-1.31 —
kubernetes-1.31 affected Wolfi kubernetes-1.31 —
kubernetes-1.31-default affected Chainguard kubernetes-1.31-default —
kubernetes-1.31-default affected Wolfi kubernetes-1.31-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kubernetes-fips-1.31 affected Chainguard kubernetes-fips-1.31 —
kubernetes-fips-1.31-default affected Chainguard kubernetes-fips-1.31-default —
kubernetes-pause-1.28 affected Chainguard kubernetes-pause-1.28 —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-1.31 affected Chainguard kubernetes-pause-1.31 —
kubernetes-pause-1.31 affected Wolfi kubernetes-pause-1.31 —
kubernetes-pause-compat-1.28 affected Chainguard kubernetes-pause-compat-1.28 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kubernetes-pause-compat-1.31 affected Chainguard kubernetes-pause-compat-1.31 —
kubernetes-pause-compat-1.31 affected Wolfi kubernetes-pause-compat-1.31 —
kubernetes-pause-fips-3.9 affected Chainguard kubernetes-pause-fips-3.9 —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28 affected Wolfi kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
kube-scheduler-1.28-default affected Wolfi kube-scheduler-1.28-default —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30 affected Wolfi kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
kube-scheduler-1.30-default affected Wolfi kube-scheduler-1.30-default —
kube-scheduler-1.30-default-compat affected Chainguard kube-scheduler-1.30-default-compat —
kube-scheduler-1.31 affected Chainguard kube-scheduler-1.31 —
kube-scheduler-1.31 affected Wolfi kube-scheduler-1.31 —
kube-scheduler-1.31-default affected Chainguard kube-scheduler-1.31-default —
kube-scheduler-1.31-default affected Wolfi kube-scheduler-1.31-default —
kube-scheduler-1.31-default-compat affected Chainguard kube-scheduler-1.31-default-compat —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
kube-scheduler-fips-1.30-default-compat affected Chainguard kube-scheduler-fips-1.30-default-compat —
kube-scheduler-fips-1.31 affected Chainguard kube-scheduler-fips-1.31 —
kube-scheduler-fips-1.31-default affected Chainguard kube-scheduler-fips-1.31-default —
kube-scheduler-fips-1.31-default-compat affected Chainguard kube-scheduler-fips-1.31-default-compat —
kube-webhook-certgen-1.10 affected Chainguard kube-webhook-certgen-1.10 —
kube-webhook-certgen-1.11 affected Wolfi kube-webhook-certgen-1.11 —
kube-webhook-certgen-1.11 affected Chainguard kube-webhook-certgen-1.11 —
kube-webhook-certgen-fips-1.10 affected Chainguard kube-webhook-certgen-fips-1.10 —
kube-webhook-certgen-fips-1.11 affected Chainguard kube-webhook-certgen-fips-1.11 —
neuvector affected Chainguard neuvector —
neuvector affected Wolfi neuvector —
neuvector-cis-benchmarks affected Chainguard neuvector-cis-benchmarks —
neuvector-cis-benchmarks affected Wolfi neuvector-cis-benchmarks —
neuvector-controller affected Chainguard neuvector-controller —
neuvector-controller affected Wolfi neuvector-controller —
neuvector-controller-fips affected Chainguard neuvector-controller-fips —
neuvector-enforcer affected Wolfi neuvector-enforcer —
neuvector-enforcer affected Chainguard neuvector-enforcer —
neuvector-enforcer-fips affected Chainguard neuvector-enforcer-fips —
neuvector-fips affected Chainguard neuvector-fips —
neuvector-monitor affected Chainguard neuvector-monitor —
neuvector-monitor affected Wolfi neuvector-monitor —
neuvector-nstools affected Chainguard neuvector-nstools —
neuvector-nstools affected Wolfi neuvector-nstools —
neuvector-scanner affected Chainguard neuvector-scanner —
neuvector-scanner affected Wolfi neuvector-scanner —
neuvector-scanner-fips affected Chainguard neuvector-scanner-fips —
neuvector-scanner-monitor affected Wolfi neuvector-scanner-monitor —
neuvector-scanner-monitor affected Chainguard neuvector-scanner-monitor —
neuvector-scanner-monitor-fips affected Chainguard neuvector-scanner-monitor-fips —
neuvector-scanner-task affected Chainguard neuvector-scanner-task —
neuvector-scanner-task affected Wolfi neuvector-scanner-task —
neuvector-scanner-task-fips affected Chainguard neuvector-scanner-task-fips —
neuvector-upgrader affected Chainguard neuvector-upgrader —
neuvector-upgrader-fips affected Chainguard neuvector-upgrader-fips —
newrelic-infrastructure-agent-1.43 affected Chainguard newrelic-infrastructure-agent-1.43 —
node-feature-discovery-0.15 affected Wolfi node-feature-discovery-0.15 —
node-feature-discovery-0.15 affected Chainguard node-feature-discovery-0.15 —
node-feature-discovery-0.16 affected Wolfi node-feature-discovery-0.16 —
node-feature-discovery-0.16 affected Chainguard node-feature-discovery-0.16 —
opentelemetry-collector-contrib affected Chainguard opentelemetry-collector-contrib —
opentelemetry-collector-contrib affected Wolfi opentelemetry-collector-contrib —
opentelemetry-collector-contrib-compat affected Chainguard opentelemetry-collector-contrib-compat —
opentelemetry-collector-contrib-compat affected Wolfi opentelemetry-collector-contrib-compat —
opentelemetry-collector-contrib-fips affected Chainguard opentelemetry-collector-contrib-fips —
podman affected Chainguard podman —
podman affected Wolfi podman —
podman-doc affected Chainguard podman-doc —
podman-doc affected Wolfi podman-doc —
runc affected Wolfi runc —
runc affected Chainguard runc —
runc-doc affected Chainguard runc-doc —
runc-doc affected Wolfi runc-doc —
syft affected Chainguard syft —
syft affected Wolfi syft —
Upstream advisory

CGA-xcxc-rc75-hcw9

Open SourceActive exploitation (sightings)2026-01-28

CGA-xcxc-rc75-hcw9

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
Upstream advisory

CGA-p42j-qfp6-pm8q

Open SourceActive exploitation (sightings)2026-01-28

CGA-p42j-qfp6-pm8q

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
Upstream advisory

CGA-m3qg-55w5-p5ww

Open SourceActive exploitation (sightings)2026-01-28

CGA-m3qg-55w5-p5ww

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.31 affected Chainguard kubeadm-fips-1.31 —
kubeadm-fips-1.31-default affected Chainguard kubeadm-fips-1.31-default —
kube-apiserver-fips-1.31 affected Chainguard kube-apiserver-fips-1.31 —
kube-apiserver-fips-1.31-default affected Chainguard kube-apiserver-fips-1.31-default —
kube-controller-manager-fips-1.31 affected Chainguard kube-controller-manager-fips-1.31 —
kube-controller-manager-fips-1.31-default affected Chainguard kube-controller-manager-fips-1.31-default —
kubectl-bash-completion-fips-1.31 affected Chainguard kubectl-bash-completion-fips-1.31 —
kubectl-fips-1.31 affected Chainguard kubectl-fips-1.31 —
kubectl-fips-1.31-default affected Chainguard kubectl-fips-1.31-default —
kubelet-fips-1.31 affected Chainguard kubelet-fips-1.31 —
kubelet-fips-1.31-default affected Chainguard kubelet-fips-1.31-default —
kube-proxy-fips-1.31 affected Chainguard kube-proxy-fips-1.31 —
kube-proxy-fips-1.31-default affected Chainguard kube-proxy-fips-1.31-default —
kubernetes-fips-1.31 affected Chainguard kubernetes-fips-1.31 —
kubernetes-fips-1.31-default affected Chainguard kubernetes-fips-1.31-default —
kube-scheduler-fips-1.31 affected Chainguard kube-scheduler-fips-1.31 —
kube-scheduler-fips-1.31-default affected Chainguard kube-scheduler-fips-1.31-default —
Upstream advisory

CGA-f445-7qx3-ppmg

Open SourceActive exploitation (sightings)2026-01-28

CGA-f445-7qx3-ppmg

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-bitnami-compat affected Chainguard kubectl-1.28-bitnami-compat —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kube-proxy-1.28-default-compat affected Chainguard kube-proxy-1.28-default-compat —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kubernetes-pause-1.28 affected Chainguard kubernetes-pause-1.28 —
kubernetes-pause-compat-1.28 affected Chainguard kubernetes-pause-compat-1.28 —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-c6x2-39m6-6wjp

Open SourceActive exploitation (sightings)2026-01-28

CGA-c6x2-39m6-6wjp

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
Upstream advisory

CGA-4wpq-5597-r949

Open SourceActive exploitation (sightings)2026-01-28

CGA-4wpq-5597-r949

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.31 affected Chainguard eks-distro-coredns-fips-1.31 —
eks-distro-fips-1.31 affected Chainguard eks-distro-fips-1.31 —
eks-distro-kube-apiserver-fips-1.31 affected Chainguard eks-distro-kube-apiserver-fips-1.31 —
eks-distro-kube-controller-manager-fips-1.31 affected Chainguard eks-distro-kube-controller-manager-fips-1.31 —
eks-distro-kube-proxy-fips-1.31 affected Chainguard eks-distro-kube-proxy-fips-1.31 —
eks-distro-kube-scheduler-fips-1.31 affected Chainguard eks-distro-kube-scheduler-fips-1.31 —
Upstream advisory

CGA-2qpc-cm34-w5w9

Open SourceActive exploitation (sightings)2026-01-28

CGA-2qpc-cm34-w5w9

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
Upstream advisory

CGA-3pp4-mj8x-xwr3

Open SourceActive exploitation (sightings)2026-01-29

CGA-3pp4-mj8x-xwr3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-58g4-v49f-fmhm

Open SourceActive exploitation (sightings)2026-01-29

CGA-58g4-v49f-fmhm

Affected products

ProductStatusVendorPackageEcosystem
argo-cd-2.12 affected Wolfi argo-cd-2.12 —
argo-cd-2.12 affected Chainguard argo-cd-2.12 —
argo-cd-2.12-compat affected Chainguard argo-cd-2.12-compat —
argo-cd-2.12-compat affected Wolfi argo-cd-2.12-compat —
argo-cd-2.12-repo-server affected Wolfi argo-cd-2.12-repo-server —
argo-cd-2.12-repo-server affected Chainguard argo-cd-2.12-repo-server —
argo-cd-fips-2.12 affected Chainguard argo-cd-fips-2.12 —
argo-cd-fips-2.12-compat affected Chainguard argo-cd-fips-2.12-compat —
argo-cd-fips-2.12-repo-server affected Chainguard argo-cd-fips-2.12-repo-server —
argocd-image-updater affected Chainguard argocd-image-updater —
argocd-image-updater affected Wolfi argocd-image-updater —
argocd-image-updater-fips affected Chainguard argocd-image-updater-fips —
aws-ebs-csi-driver affected Chainguard aws-ebs-csi-driver —
aws-ebs-csi-driver affected Wolfi aws-ebs-csi-driver —
aws-ebs-csi-driver-fips affected Chainguard aws-ebs-csi-driver-fips —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
calico-3.27 affected Chainguard calico-3.27 —
calico-3.27-apiserver affected Chainguard calico-3.27-apiserver —
calico-3.27-app-policy affected Chainguard calico-3.27-app-policy —
calico-3.27-calicoctl affected Chainguard calico-3.27-calicoctl —
calico-3.27-cni affected Chainguard calico-3.27-cni —
calico-3.27-cni-compat affected Chainguard calico-3.27-cni-compat —
calico-3.27-felix affected Chainguard calico-3.27-felix —
calico-3.27-kube-controllers affected Chainguard calico-3.27-kube-controllers —
calico-3.27-node affected Chainguard calico-3.27-node —
calico-3.27-pod2daemon affected Chainguard calico-3.27-pod2daemon —
calico-3.27-pod2daemon-flexvol-compat affected Chainguard calico-3.27-pod2daemon-flexvol-compat —
calico-3.27-typha-client affected Chainguard calico-3.27-typha-client —
calico-3.27-typhad affected Chainguard calico-3.27-typhad —
calico-apiserver-3.27 affected Chainguard calico-apiserver-3.27 —
calico-apiserver-compat-3.27 affected Chainguard calico-apiserver-compat-3.27 —
calico-apiserver-compat-fips-3.27 affected Chainguard calico-apiserver-compat-fips-3.27 —
calico-apiserver-fips-3.27 affected Chainguard calico-apiserver-fips-3.27 —
calico-apiserver-fips-3.28 affected Chainguard calico-apiserver-fips-3.28 —
calico-app-policy-3.27 affected Chainguard calico-app-policy-3.27 —
calico-app-policy-fips-3.27 affected Chainguard calico-app-policy-fips-3.27 —
calico-app-policy-fips-3.28 affected Chainguard calico-app-policy-fips-3.28 —
calico-cni-3.27 affected Chainguard calico-cni-3.27 —
calico-cni-compat-3.27 affected Chainguard calico-cni-compat-3.27 —
calico-cni-compat-fips-3.27 affected Chainguard calico-cni-compat-fips-3.27 —
calico-cni-compat-fips-3.28 affected Chainguard calico-cni-compat-fips-3.28 —
calico-cni-fips-3.27 affected Chainguard calico-cni-fips-3.27 —
calico-cni-fips-3.28 affected Chainguard calico-cni-fips-3.28 —
calicoctl-3.27 affected Chainguard calicoctl-3.27 —
calicoctl-fips-3.27 affected Chainguard calicoctl-fips-3.27 —
calicoctl-fips-3.28 affected Chainguard calicoctl-fips-3.28 —
calico-felix-3.27 affected Chainguard calico-felix-3.27 —
calico-felix-fips-3.27 affected Chainguard calico-felix-fips-3.27 —
calico-felix-fips-3.28 affected Chainguard calico-felix-fips-3.28 —
calico-fips-3.27 affected Chainguard calico-fips-3.27 —
calico-fips-3.28 affected Chainguard calico-fips-3.28 —
calico-key-cert-provisioner-fips-3.28 affected Chainguard calico-key-cert-provisioner-fips-3.28 —
calico-kube-controllers-3.27 affected Chainguard calico-kube-controllers-3.27 —
calico-kube-controllers-fips-3.27 affected Chainguard calico-kube-controllers-fips-3.27 —
calico-kube-controllers-fips-3.28 affected Chainguard calico-kube-controllers-fips-3.28 —
calico-node-3.27 affected Chainguard calico-node-3.27 —
calico-node-fips-3.27 affected Chainguard calico-node-fips-3.27 —
calico-node-fips-3.28 affected Chainguard calico-node-fips-3.28 —
calico-pod2daemon-3.27 affected Chainguard calico-pod2daemon-3.27 —
calico-pod2daemon-fips-3.27 affected Chainguard calico-pod2daemon-fips-3.27 —
calico-pod2daemon-fips-3.28 affected Chainguard calico-pod2daemon-fips-3.28 —
calico-pod2daemon-flexvol-compat-3.27 affected Chainguard calico-pod2daemon-flexvol-compat-3.27 —
calico-pod2daemon-flexvol-compat-fips-3.27 affected Chainguard calico-pod2daemon-flexvol-compat-fips-3.27 —
calico-typha-client-3.27 affected Chainguard calico-typha-client-3.27 —
calico-typha-client-fips-3.27 affected Chainguard calico-typha-client-fips-3.27 —
calico-typha-client-fips-3.28 affected Chainguard calico-typha-client-fips-3.28 —
calico-typhad-3.27 affected Chainguard calico-typhad-3.27 —
calico-typhad-fips-3.27 affected Chainguard calico-typhad-fips-3.27 —
calico-typhad-fips-3.28 affected Chainguard calico-typhad-fips-3.28 —
cluster-autoscaler-1.28 affected Chainguard cluster-autoscaler-1.28 —
cluster-autoscaler-1.28 affected Wolfi cluster-autoscaler-1.28 —
cluster-autoscaler-1.28-compat affected Chainguard cluster-autoscaler-1.28-compat —
cluster-autoscaler-1.28-compat affected Wolfi cluster-autoscaler-1.28-compat —
cluster-autoscaler-1.29 affected Chainguard cluster-autoscaler-1.29 —
cluster-autoscaler-1.29 affected Wolfi cluster-autoscaler-1.29 —
cluster-autoscaler-1.29-compat affected Wolfi cluster-autoscaler-1.29-compat —
cluster-autoscaler-1.29-compat affected Chainguard cluster-autoscaler-1.29-compat —
cluster-autoscaler-1.30 affected Wolfi cluster-autoscaler-1.30 —
cluster-autoscaler-1.30 affected Chainguard cluster-autoscaler-1.30 —
cluster-autoscaler-1.30-compat affected Wolfi cluster-autoscaler-1.30-compat —
cluster-autoscaler-1.30-compat affected Chainguard cluster-autoscaler-1.30-compat —
cluster-autoscaler-fips-1.28 affected Chainguard cluster-autoscaler-fips-1.28 —
cluster-autoscaler-fips-1.28-compat affected Chainguard cluster-autoscaler-fips-1.28-compat —
cluster-autoscaler-fips-1.29 affected Chainguard cluster-autoscaler-fips-1.29 —
cluster-autoscaler-fips-1.29-compat affected Chainguard cluster-autoscaler-fips-1.29-compat —
cluster-autoscaler-fips-1.30 affected Chainguard cluster-autoscaler-fips-1.30 —
cluster-autoscaler-fips-1.30-compat affected Chainguard cluster-autoscaler-fips-1.30-compat —
crictl affected Chainguard crictl —
crictl affected Wolfi crictl —
critest affected Wolfi critest —
critest affected Chainguard critest —
cri-tools affected Wolfi cri-tools —
cri-tools affected Chainguard cri-tools —
gpu-feature-discovery affected Wolfi gpu-feature-discovery —
gpu-feature-discovery affected Chainguard gpu-feature-discovery —
ip-masq-agent affected Chainguard ip-masq-agent —
ip-masq-agent affected Wolfi ip-masq-agent —
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kubeadm-fips-1.30-default-compat affected Chainguard kubeadm-fips-1.30-default-compat —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-apiserver-fips-1.30-default-compat affected Chainguard kube-apiserver-fips-1.30-default-compat —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kube-controller-manager-fips-1.30-default-compat affected Chainguard kube-controller-manager-fips-1.30-default-compat —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubectl-fips-1.30-default-compat affected Chainguard kubectl-fips-1.30-default-compat —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kubelet-fips-1.30-default-compat affected Chainguard kubelet-fips-1.30-default-compat —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kube-proxy-fips-1.30-default-compat affected Chainguard kube-proxy-fips-1.30-default-compat —
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
kubernetes-1.27 affected Wolfi kubernetes-1.27 —
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kubernetes-pause-fips-3.9 affected Chainguard kubernetes-pause-fips-3.9 —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
kube-scheduler-fips-1.30-default-compat affected Chainguard kube-scheduler-fips-1.30-default-compat —
local-static-provisioner affected Wolfi local-static-provisioner —
local-static-provisioner affected Chainguard local-static-provisioner —
local-static-provisioner-compat affected Chainguard local-static-provisioner-compat —
local-static-provisioner-compat affected Wolfi local-static-provisioner-compat —
local-volume-node-cleanup affected Wolfi local-volume-node-cleanup —
local-volume-node-cleanup affected Chainguard local-volume-node-cleanup —
local-volume-node-cleanup-compat affected Chainguard local-volume-node-cleanup-compat —
local-volume-node-cleanup-compat affected Wolfi local-volume-node-cleanup-compat —
node-feature-discovery-0.15 affected Chainguard node-feature-discovery-0.15 —
node-feature-discovery-0.15 affected Wolfi node-feature-discovery-0.15 —
node-feature-discovery-0.16 affected Chainguard node-feature-discovery-0.16 —
node-feature-discovery-0.16 affected Wolfi node-feature-discovery-0.16 —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
rancher-webhook-0.4 affected Chainguard rancher-webhook-0.4 —
rancher-webhook-fips-0.4 affected Chainguard rancher-webhook-fips-0.4 —
rancher-webhook-fips-0.5 affected Chainguard rancher-webhook-fips-0.5 —
sparkctl affected Chainguard sparkctl —
sparkctl affected Wolfi sparkctl —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
Upstream advisory

ECHO-ff7b-4bc1-46e0

Open SourceActive exploitation (sightings)2026-01-28

ECHO-ff7b-4bc1-46e0

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected k8s.io k8s.io/kubernetes —
Upstream advisory

CGA-xx27-jcpr-cq92

Open SourceActive exploitation (sightings)2026-01-28

CGA-xx27-jcpr-cq92

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-fips affected Chainguard kubernetes-dns-node-cache-fips —
Upstream advisory

CGA-x3cf-vwf2-jxqc

Open SourceActive exploitation (sightings)2026-01-28

CGA-x3cf-vwf2-jxqc

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
Upstream advisory

CGA-vpx8-jp2g-vjp5

Open SourceActive exploitation (sightings)2026-01-28

CGA-vpx8-jp2g-vjp5

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
Upstream advisory

CGA-jmhf-j53w-3629

Open SourceActive exploitation (sightings)2026-01-28

CGA-jmhf-j53w-3629

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
Upstream advisory

CGA-jjp3-5cmx-w4rw

Open SourceActive exploitation (sightings)2026-01-28

CGA-jjp3-5cmx-w4rw

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
Upstream advisory

CGA-gv2x-g4q4-jq86

Open SourceActive exploitation (sightings)2026-01-28

CGA-gv2x-g4q4-jq86

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
Upstream advisory

CGA-9gxq-8wc8-wmv4

Open SourceActive exploitation (sightings)2026-01-28

CGA-9gxq-8wc8-wmv4

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
Upstream advisory

CGA-f2mw-r68j-48wc

Open SourceActive exploitation (sightings)2026-01-29

CGA-f2mw-r68j-48wc

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-reflector affected Chainguard kubernetes-reflector —
kubernetes-reflector affected Wolfi kubernetes-reflector —
kubernetes-reflector-compat affected Chainguard kubernetes-reflector-compat —
kubernetes-reflector-compat affected Wolfi kubernetes-reflector-compat —
Upstream advisory

CGA-mwp4-xmf2-c5p5

Open SourceActive exploitation (sightings)2026-01-28

CGA-mwp4-xmf2-c5p5

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-reflector affected Wolfi kubernetes-reflector —
kubernetes-reflector affected Chainguard kubernetes-reflector —
kubernetes-reflector-compat affected Chainguard kubernetes-reflector-compat —
kubernetes-reflector-compat affected Wolfi kubernetes-reflector-compat —
Upstream advisory

CVE-2026-20969

Open SourceActive exploitation (sightings)MEDIUM2026-01-05

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.

CVEs:CVE-2026-20969

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CGA-6ghg-j95g-36xf

GoogleActive exploitation (sightings)2026-01-29

CGA-6ghg-j95g-36xf

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-qf58-m5px-mqw3

GoogleActive exploitation (sightings)2026-01-28

CGA-qf58-m5px-mqw3

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-8ff8-4vxg-x8qw

Open SourceActive exploitation (sightings)2026-01-29

CGA-8ff8-4vxg-x8qw

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Wolfi chromium-lang —
chromium-lang affected Chainguard chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CVE-2026-21223

Open SourceActive exploitation (sightings)HIGH2026-01-13

Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.

CVEs:CVE-2026-21223

Affected products

ProductStatusVendorPackageEcosystem
edge_chromium affected microsoft — —
Upstream advisory

CGA-27gj-f227-q234

Open SourceActive exploitation (sightings)2026-01-12

CGA-27gj-f227-q234

Affected products

ProductStatusVendorPackageEcosystem
jupyter-base-notebook affected Chainguard jupyter-base-notebook —
jupyter-base-notebook affected Wolfi jupyter-base-notebook —
jupyter-base-notebook-oci-entrypoint affected Wolfi jupyter-base-notebook-oci-entrypoint —
jupyter-base-notebook-oci-entrypoint affected Chainguard jupyter-base-notebook-oci-entrypoint —
kubeflow-pipelines-visualization-server affected Wolfi kubeflow-pipelines-visualization-server —
kubeflow-pipelines-visualization-server affected Chainguard kubeflow-pipelines-visualization-server —
py3.10-nbconvert affected Chainguard py3.10-nbconvert —
py3.10-nbconvert affected Wolfi py3.10-nbconvert —
py3.10-nbconvert-bin affected Chainguard py3.10-nbconvert-bin —
py3.10-nbconvert-bin affected Wolfi py3.10-nbconvert-bin —
py3.11-nbconvert affected Wolfi py3.11-nbconvert —
py3.11-nbconvert affected Chainguard py3.11-nbconvert —
py3.11-nbconvert-bin affected Chainguard py3.11-nbconvert-bin —
py3.11-nbconvert-bin affected Wolfi py3.11-nbconvert-bin —
py3.12-nbconvert affected Chainguard py3.12-nbconvert —
py3.12-nbconvert affected Wolfi py3.12-nbconvert —
py3.12-nbconvert-bin affected Chainguard py3.12-nbconvert-bin —
py3.12-nbconvert-bin affected Wolfi py3.12-nbconvert-bin —
py3.13-nbconvert affected Wolfi py3.13-nbconvert —
py3.13-nbconvert affected Chainguard py3.13-nbconvert —
py3.13-nbconvert-bin affected Chainguard py3.13-nbconvert-bin —
py3.13-nbconvert-bin affected Wolfi py3.13-nbconvert-bin —
py3-nbconvert affected Wolfi py3-nbconvert —
py3-nbconvert affected Chainguard py3-nbconvert —
py3-supported-nbconvert affected Wolfi py3-supported-nbconvert —
py3-supported-nbconvert affected Chainguard py3-supported-nbconvert —
tensorflow-cpu-jupyter affected Chainguard tensorflow-cpu-jupyter —
tensorflow-cpu-jupyter affected Wolfi tensorflow-cpu-jupyter —
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
Upstream advisory

DSA-6116-1

Open SourceActive exploitation (sightings)2026-01-30

chromium - security update

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
Upstream advisory

openSUSE-SU-2026:10121-1

Open SourceActive exploitation (sightings)2026-01-30

chromedriver-144.0.7559.109-1.1 on GA media

Affected products

ProductStatusVendorPackageEcosystem
chromium affected openSUSE:Tumbleweed chromium —
Upstream advisory

GHSA-m6qv-96fg-92g8

Open SourceActive exploitation (sightings)MEDIUM2026-01-27

GHSA-m6qv-96fg-92g8

Affected products

ProductStatusVendorPackageEcosystem
chromium affected chainguard chromium —
chromium affected wolfi chromium —
Upstream advisory

DEBIAN-CVE-2026-1504

Open SourceActive exploitation (sightings)MEDIUM2026-01-27

DEBIAN-CVE-2026-1504

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2026-1504

GoogleActive exploitation (sightings)MEDIUM2026-01-27

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2026-1504

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CGA-2j2p-38rf-w7w6

Open SourceActive exploitation (sightings)2026-01-29

CGA-2j2p-38rf-w7w6

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

DEBIAN-CVE-2026-24686

Open SourceActive exploitation (sightings)CRITICAL2026-01-27

DEBIAN-CVE-2026-24686

Affected products

ProductStatusVendorPackageEcosystem
golang-github-theupdateframework-go-tuf affected Debian:13 golang-github-theupdateframework-go-tuf —
golang-github-theupdateframework-go-tuf affected Debian:14 golang-github-theupdateframework-go-tuf —
Upstream advisory

CGA-c27c-xqwj-2rjh

Open SourceActive exploitation (sightings)2026-01-21

CGA-c27c-xqwj-2rjh

Affected products

ProductStatusVendorPackageEcosystem
dask-gateway affected Wolfi dask-gateway —
dask-gateway affected Chainguard dask-gateway —
dask-kubernetes affected Chainguard dask-kubernetes —
dask-kubernetes affected Wolfi dask-kubernetes —
Upstream advisory

CGA-8prv-6xq4-4gw9

Open SourceActive exploitation (sightings)2026-01-21

CGA-8prv-6xq4-4gw9

Affected products

ProductStatusVendorPackageEcosystem
dask-kubernetes affected Chainguard dask-kubernetes —
dask-kubernetes affected Wolfi dask-kubernetes —
Upstream advisory

GHSA-c336-7962-wfj2

GoogleActive exploitation (sightings)HIGH2026-01-16

Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Affected products

ProductStatusVendorPackageEcosystem
distributed affected PyPI distributed —
Upstream advisory

GHSA-c336-7962-wfj2

Open SourceActive exploitation (sightings)HIGH2026-01-16

Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Affected products

ProductStatusVendorPackageEcosystem
dask-gateway affected wolfi dask-gateway —
dask-gateway affected chainguard dask-gateway —
dask-kubernetes affected chainguard dask-kubernetes —
dask-kubernetes affected wolfi dask-kubernetes —
distributed affected PyPI distributed —
distributed affected PyPI distributed —
Upstream advisory

DEBIAN-CVE-2026-22772

Open SourceActive exploitation (sightings)HIGH2026-01-12

DEBIAN-CVE-2026-22772

Affected products

ProductStatusVendorPackageEcosystem
golang-github-sigstore-fulcio affected Debian:13 golang-github-sigstore-fulcio —
golang-github-sigstore-fulcio affected Debian:14 golang-github-sigstore-fulcio —
Upstream advisory

GHSA-m9rg-mr6g-75gm

GoogleActive exploitation (sightings)CRITICAL2026-01-05

`vega-functions` vulnerable to Cross-site Scripting via `setdata` function

Affected products

ProductStatusVendorPackageEcosystem
vega-functions affected npm vega-functions —
Upstream advisory

GHSA-m9rg-mr6g-75gm

Open SourceActive exploitation (sightings)CRITICAL2026-01-05

`vega-functions` vulnerable to Cross-site Scripting via `setdata` function

Affected products

ProductStatusVendorPackageEcosystem
py3-jupyterlab affected chainguard py3-jupyterlab —
py3-jupyterlab affected wolfi py3-jupyterlab —
tensorflow-cpu-jupyter affected chainguard tensorflow-cpu-jupyter —
tensorflow-gpu-jupyter affected chainguard tensorflow-gpu-jupyter —
vega-functions affected npm vega-functions —
Upstream advisory

CGA-vqcf-23pj-f75j

Open SourceActive exploitation (sightings)2026-01-29

CGA-vqcf-23pj-f75j

Affected products

ProductStatusVendorPackageEcosystem
atuin affected Wolfi atuin —
atuin affected Chainguard atuin —
bat affected Wolfi bat —
bat affected Chainguard bat —
bat-doc affected Chainguard bat-doc —
bat-doc affected Wolfi bat-doc —
berg affected Wolfi berg —
berg affected Chainguard berg —
buck2 affected Chainguard buck2 —
buck2 affected Wolfi buck2 —
cargo-audit affected Chainguard cargo-audit —
cargo-audit affected Wolfi cargo-audit —
cargo-audit-doc affected Chainguard cargo-audit-doc —
cargo-audit-doc affected Wolfi cargo-audit-doc —
convco affected Chainguard convco —
convco affected Wolfi convco —
deno affected Chainguard deno —
deno affected Wolfi deno —
fnm affected Chainguard fnm —
geckodriver affected Wolfi geckodriver —
geckodriver affected Chainguard geckodriver —
helix affected Chainguard helix —
helix affected Wolfi helix —
kdash affected Chainguard kdash —
kdash affected Wolfi kdash —
libwasmtime affected Wolfi libwasmtime —
libwasmtime affected Chainguard libwasmtime —
linkerd2 affected Chainguard linkerd2 —
linkerd2 affected Wolfi linkerd2 —
linkerd2-cli affected Chainguard linkerd2-cli —
linkerd2-cli affected Wolfi linkerd2-cli —
linkerd2-controller affected Chainguard linkerd2-controller —
linkerd2-controller affected Wolfi linkerd2-controller —
linkerd2-controller-compat affected Wolfi linkerd2-controller-compat —
linkerd2-controller-compat affected Chainguard linkerd2-controller-compat —
linkerd2-debug affected Wolfi linkerd2-debug —
linkerd2-debug affected Chainguard linkerd2-debug —
linkerd2-metrics-api affected Wolfi linkerd2-metrics-api —
linkerd2-metrics-api affected Chainguard linkerd2-metrics-api —
linkerd2-metrics-api-compat affected Chainguard linkerd2-metrics-api-compat —
linkerd2-metrics-api-compat affected Wolfi linkerd2-metrics-api-compat —
linkerd2-policy-controller affected Chainguard linkerd2-policy-controller —
linkerd2-policy-controller affected Wolfi linkerd2-policy-controller —
linkerd2-policy-controller-compat affected Chainguard linkerd2-policy-controller-compat —
linkerd2-policy-controller-compat affected Wolfi linkerd2-policy-controller-compat —
linkerd2-proxy affected Chainguard linkerd2-proxy —
linkerd2-proxy affected Wolfi linkerd2-proxy —
linkerd2-proxy-identity affected Chainguard linkerd2-proxy-identity —
linkerd2-proxy-identity affected Wolfi linkerd2-proxy-identity —
linkerd2-tap affected Wolfi linkerd2-tap —
linkerd2-tap affected Chainguard linkerd2-tap —
linkerd2-tap-compat affected Wolfi linkerd2-tap-compat —
linkerd2-tap-compat affected Chainguard linkerd2-tap-compat —
linkerd2-web affected Wolfi linkerd2-web —
linkerd2-web affected Chainguard linkerd2-web —
lychee affected Wolfi lychee —
lychee affected Chainguard lychee —
netavark affected Chainguard netavark —
netavark affected Wolfi netavark —
nushell affected Wolfi nushell —
nushell affected Chainguard nushell —
nushell-plugins affected Chainguard nushell-plugins —
nushell-plugins affected Wolfi nushell-plugins —
oranda affected Wolfi oranda —
oranda affected Chainguard oranda —
parseable affected Chainguard parseable —
parseable affected Wolfi parseable —
pixi affected Chainguard pixi —
pixi affected Wolfi pixi —
pixi-compat affected Wolfi pixi-compat —
pixi-compat affected Chainguard pixi-compat —
qdrant affected Wolfi qdrant —
qdrant affected Chainguard qdrant —
rust-analyzer affected Chainguard rust-analyzer —
rust-analyzer affected Wolfi rust-analyzer —
rustup affected Chainguard rustup —
rustup affected Wolfi rustup —
rye affected Chainguard rye —
rye affected Wolfi rye —
samply affected Chainguard samply —
samply affected Wolfi samply —
sccache affected Wolfi sccache —
sccache affected Chainguard sccache —
sdp-device-id-service affected Wolfi sdp-device-id-service —
sdp-device-id-service affected Chainguard sdp-device-id-service —
sdp-identity-service affected Chainguard sdp-identity-service —
sdp-identity-service affected Wolfi sdp-identity-service —
sdp-k8s-injector affected Wolfi sdp-k8s-injector —
sdp-k8s-injector affected Chainguard sdp-k8s-injector —
shadowsocks-rust affected Chainguard shadowsocks-rust —
shadowsocks-rust affected Wolfi shadowsocks-rust —
shadowsocks-rust-sslocal affected Wolfi shadowsocks-rust-sslocal —
shadowsocks-rust-sslocal affected Chainguard shadowsocks-rust-sslocal —
shadowsocks-rust-ssmanager affected Chainguard shadowsocks-rust-ssmanager —
shadowsocks-rust-ssmanager affected Wolfi shadowsocks-rust-ssmanager —
shadowsocks-rust-ssserver affected Wolfi shadowsocks-rust-ssserver —
shadowsocks-rust-ssserver affected Chainguard shadowsocks-rust-ssserver —
shadowsocks-rust-ssservice affected Wolfi shadowsocks-rust-ssservice —
shadowsocks-rust-ssservice affected Chainguard shadowsocks-rust-ssservice —
shadowsocks-rust-ssurl affected Chainguard shadowsocks-rust-ssurl —
shadowsocks-rust-ssurl affected Wolfi shadowsocks-rust-ssurl —
starship affected Chainguard starship —
starship affected Wolfi starship —
tealdeer affected Chainguard tealdeer —
tealdeer affected Wolfi tealdeer —
wadm affected Wolfi wadm —
wadm affected Chainguard wadm —
wash affected Wolfi wash —
wash affected Chainguard wash —
wasmcloud affected Chainguard wasmcloud —
wasmcloud affected Wolfi wasmcloud —
wasmtime affected Chainguard wasmtime —
wasmtime affected Wolfi wasmtime —
wasmtime-dev affected Chainguard wasmtime-dev —
wasmtime-dev affected Wolfi wasmtime-dev —
wizer affected Chainguard wizer —
wizer affected Wolfi wizer —
xh affected Chainguard xh —
xh affected Wolfi xh —
zellij affected Chainguard zellij —
zellij affected Wolfi zellij —
zellij-bash-completion affected Wolfi zellij-bash-completion —
zellij-bash-completion affected Chainguard zellij-bash-completion —
zellij-fish-completion affected Chainguard zellij-fish-completion —
zellij-fish-completion affected Wolfi zellij-fish-completion —
zellij-zsh-completion affected Chainguard zellij-zsh-completion —
zellij-zsh-completion affected Wolfi zellij-zsh-completion —
ztunnel-1.24 affected Chainguard ztunnel-1.24 —
ztunnel-1.24 affected Wolfi ztunnel-1.24 —
ztunnel-1.24-compat affected Wolfi ztunnel-1.24-compat —
ztunnel-1.24-compat affected Chainguard ztunnel-1.24-compat —
ztunnel-fips-1.24 affected Chainguard ztunnel-fips-1.24 —
ztunnel-fips-1.24-compat affected Chainguard ztunnel-fips-1.24-compat —
Upstream advisory

DEBIAN-CVE-2026-23992

Open SourceActive exploitation (sightings)HIGH2026-01-22

DEBIAN-CVE-2026-23992

Affected products

ProductStatusVendorPackageEcosystem
golang-github-theupdateframework-go-tuf affected Debian:14 golang-github-theupdateframework-go-tuf —
golang-github-theupdateframework-go-tuf affected Debian:13 golang-github-theupdateframework-go-tuf —
Upstream advisory

CGA-7hrw-x473-8q8j

GoogleActive exploitation (sightings)2026-01-29

CGA-7hrw-x473-8q8j

Affected products

ProductStatusVendorPackageEcosystem
elasticsearch-7 affected Chainguard elasticsearch-7 —
elasticsearch-7-bitnami affected Chainguard elasticsearch-7-bitnami —
elasticsearch-7-iamguarded affected Chainguard elasticsearch-7-iamguarded —
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-g77r-crqm-jqv5

GoogleActive exploitation (sightings)2026-01-28

CGA-g77r-crqm-jqv5

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-gpmm-j9x7-4829

Open SourceActive exploitation (sightings)2026-01-29

CGA-gpmm-j9x7-4829

Affected products

ProductStatusVendorPackageEcosystem
jupyter-base-notebook-oci-entrypoint affected Chainguard jupyter-base-notebook-oci-entrypoint —
jupyter-base-notebook-oci-entrypoint affected Wolfi jupyter-base-notebook-oci-entrypoint —
kubeflow-pipelines-visualization-server affected Wolfi kubeflow-pipelines-visualization-server —
kubeflow-pipelines-visualization-server affected Chainguard kubeflow-pipelines-visualization-server —
tensorflow-cpu-jupyter affected Chainguard tensorflow-cpu-jupyter —
tensorflow-cpu-jupyter affected Wolfi tensorflow-cpu-jupyter —
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
Upstream advisory

CGA-cjgh-vp96-jvvc

Open SourceActive exploitation (sightings)2026-01-28

CGA-cjgh-vp96-jvvc

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
Upstream advisory

CVE-2026-20974

Open SourceActive exploitation (sightings)MEDIUM2026-01-05

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.

CVEs:CVE-2026-20974

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CVE-2026-1260

GoogleActive exploitation (sightings)HIGH2026-01-22

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

CVEs:CVE-2026-1260

Affected products

ProductStatusVendorPackageEcosystem
sentencepiece affected google — —
Upstream advisory

CVE-2026-1260

GoogleActive exploitation (sightings)HIGH2026-01-22

Sentencepiece has a a heap overflow issue

CVEs:CVE-2026-1260

Affected products

ProductStatusVendorPackageEcosystem
sentencepiece affected PyPI sentencepiece —
Upstream advisory

CVE-2026-1260

GoogleActive exploitation (sightings)CRITICAL2026-01-22

Sentencepiece has a a heap overflow issue

CVEs:CVE-2026-1260

Affected products

ProductStatusVendorPackageEcosystem
sentencepiece affected PyPI sentencepiece —
Upstream advisory

CGA-3x5j-3jmp-9j5w

GoogleActive exploitation (sightings)2026-01-29

CGA-3x5j-3jmp-9j5w

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-c35c-6qcp-r887

GoogleActive exploitation (sightings)2026-01-28

CGA-c35c-6qcp-r887

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CVE-2026-20968

Open SourceActive exploitation (sightings)HIGH2026-01-05

Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CVEs:CVE-2026-20968

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CVE-2026-20971

Open SourceActive exploitation (sightings)HIGH2026-01-05

Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVEs:CVE-2026-20971

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CVE-2026-20970

Open SourceActive exploitation (sightings)HIGH2026-01-05

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.

CVEs:CVE-2026-20970

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CVE-2026-20972

Open SourceActive exploitation (sightings)MEDIUM2026-01-05

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.

CVEs:CVE-2026-20972

Affected products

ProductStatusVendorPackageEcosystem
android affected samsung — —
Upstream advisory

CGA-gx5f-5q53-h674

Open SourceActive exploitation (sightings)2026-01-29

CGA-gx5f-5q53-h674

Affected products

ProductStatusVendorPackageEcosystem
tensorflow-cpu-jupyter affected Chainguard tensorflow-cpu-jupyter —
tensorflow-cpu-jupyter affected Wolfi tensorflow-cpu-jupyter —
tensorflow-gpu-jupyter affected Chainguard tensorflow-gpu-jupyter —
Upstream advisory

CGA-5hpj-pg49-4gfp

GoogleActive exploitation (sightings)2026-01-29

CGA-5hpj-pg49-4gfp

Affected products

ProductStatusVendorPackageEcosystem
flyway affected Wolfi flyway —
flyway affected Chainguard flyway —
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
Upstream advisory

CGA-qrf2-gqvc-9j7v

GoogleActive exploitation (sightings)2026-01-28

CGA-qrf2-gqvc-9j7v

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CVE-2025-48647

Open SourceActive exploitation (sightings)HIGH2026-01-13

In cpm_fwtp_msg_handler of cpm/google/lib/tracepoint/cpm_fwtp_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...

CVEs:CVE-2025-48647

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PUB-A-445395606

GoogleActive exploitation (sightings)NONE2026-01-01

PUB-A-445395606

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2025-20782

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20782

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20780

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS101...

CVEs:CVE-2025-20780

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20807

Open SourceActive exploitation (sightings)HIGH2026-01-06

In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS...

CVEs:CVE-2025-20807

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20798

Open SourceActive exploitation (sightings)HIGH2026-01-06

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20798

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20797

Open SourceActive exploitation (sightings)HIGH2026-01-06

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20797

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20778

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20778

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20779

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1018...

CVEs:CVE-2025-20779

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20806

Open SourceActive exploitation (sightings)HIGH2026-01-06

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1011483...

CVEs:CVE-2025-20806

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20805

Open SourceActive exploitation (sightings)HIGH2026-01-06

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1011469...

CVEs:CVE-2025-20805

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20804

Open SourceActive exploitation (sightings)HIGH2026-01-06

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10198951; I...

CVEs:CVE-2025-20804

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20787

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS101...

CVEs:CVE-2025-20787

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20786

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS101...

CVEs:CVE-2025-20786

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20785

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS101...

CVEs:CVE-2025-20785

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20784

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALP...

CVEs:CVE-2025-20784

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20783

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20783

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20802

Open SourceActive exploitation (sightings)HIGH2026-01-06

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1...

CVEs:CVE-2025-20802

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20781

Open SourceActive exploitation (sightings)HIGH2026-01-06

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS101...

CVEs:CVE-2025-20781

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20800

Open SourceActive exploitation (sightings)HIGH2026-01-06

In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...

CVEs:CVE-2025-20800

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20799

Open SourceActive exploitation (sightings)HIGH2026-01-06

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS102746...

CVEs:CVE-2025-20799

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20796

Open SourceActive exploitation (sightings)HIGH2026-01-06

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID:...

CVEs:CVE-2025-20796

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2025-20801

Open SourceActive exploitation (sightings)HIGH2026-01-06

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10...

CVEs:CVE-2025-20801

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CGA-j8gj-vf45-35qh

Open SourceCoalition ESS > 63%2026-01-29

CGA-j8gj-vf45-35qh

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-8cj4-f9w9-54rg

Open SourceCoalition ESS > 63%2026-01-29

CGA-8cj4-f9w9-54rg

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-7ggp-cmp8-x4fw

Open SourceCoalition ESS > 63%2026-01-28

CGA-7ggp-cmp8-x4fw

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-x722-g652-7933

Open SourceCoalition ESS > 63%2026-01-28

CGA-x722-g652-7933

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
Upstream advisory

CGA-vwg5-38v9-3mh8

Open SourceCoalition ESS > 63%2026-01-28

CGA-vwg5-38v9-3mh8

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
Upstream advisory

CGA-7v3m-9776-q7ww

Open SourceCoalition ESS > 63%2026-01-28

CGA-7v3m-9776-q7ww

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
Upstream advisory

CGA-5g68-452v-p3q9

Open SourceCoalition ESS > 63%2026-01-28

CGA-5g68-452v-p3q9

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
Upstream advisory

MINI-3q7j-42w7-87jc

Open SourceCoalition ESS > 63%2026-01-25

MINI-3q7j-42w7-87jc

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-fips-1.32 affected MinimOS eks-kube-apiserver-fips-1.32 —
eks-kube-apiserver-fips-1.32-compat affected MinimOS eks-kube-apiserver-fips-1.32-compat —
eks-kube-controller-manager-fips-1.32 affected MinimOS eks-kube-controller-manager-fips-1.32 —
eks-kube-controller-manager-fips-1.32-compat affected MinimOS eks-kube-controller-manager-fips-1.32-compat —
eks-kubectl-fips-1.32 affected MinimOS eks-kubectl-fips-1.32 —
eks-kubectl-fips-1.32-compat affected MinimOS eks-kubectl-fips-1.32-compat —
eks-kubelet-fips-1.32 affected MinimOS eks-kubelet-fips-1.32 —
eks-kubelet-fips-1.32-compat affected MinimOS eks-kubelet-fips-1.32-compat —
eks-kube-proxy-fips-1.32 affected MinimOS eks-kube-proxy-fips-1.32 —
eks-kube-proxy-fips-1.32-compat affected MinimOS eks-kube-proxy-fips-1.32-compat —
eks-kubernetes-fips-1.32 affected MinimOS eks-kubernetes-fips-1.32 —
eks-kube-scheduler-fips-1.32 affected MinimOS eks-kube-scheduler-fips-1.32 —
eks-kube-scheduler-fips-1.32-compat affected MinimOS eks-kube-scheduler-fips-1.32-compat —
Upstream advisory

MINI-5p2j-h4jh-2945

Open SourceCoalition ESS > 63%2026-01-25

MINI-5p2j-h4jh-2945

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-1.32 affected MinimOS eks-kube-apiserver-1.32 —
eks-kube-apiserver-1.32-compat affected MinimOS eks-kube-apiserver-1.32-compat —
eks-kube-controller-manager-1.32 affected MinimOS eks-kube-controller-manager-1.32 —
eks-kube-controller-manager-1.32-compat affected MinimOS eks-kube-controller-manager-1.32-compat —
eks-kubectl-1.32 affected MinimOS eks-kubectl-1.32 —
eks-kubectl-1.32-compat affected MinimOS eks-kubectl-1.32-compat —
eks-kubelet-1.32 affected MinimOS eks-kubelet-1.32 —
eks-kubelet-1.32-compat affected MinimOS eks-kubelet-1.32-compat —
eks-kube-proxy-1.32 affected MinimOS eks-kube-proxy-1.32 —
eks-kube-proxy-1.32-compat affected MinimOS eks-kube-proxy-1.32-compat —
eks-kubernetes-1.32 affected MinimOS eks-kubernetes-1.32 —
eks-kube-scheduler-1.32 affected MinimOS eks-kube-scheduler-1.32 —
eks-kube-scheduler-1.32-compat affected MinimOS eks-kube-scheduler-1.32-compat —
Upstream advisory

CGA-j6fg-v38r-fmwc

Open SourceCoalition ESS > 63%2026-01-11

CGA-j6fg-v38r-fmwc

Affected products

ProductStatusVendorPackageEcosystem
azure-vnet-cni affected Chainguard azure-vnet-cni —
buildah affected Wolfi buildah —
buildah affected Chainguard buildah —
cluster-autoscaler-1.31 affected Wolfi cluster-autoscaler-1.31 —
cluster-autoscaler-1.31 affected Chainguard cluster-autoscaler-1.31 —
cluster-autoscaler-fips-1.31 affected Chainguard cluster-autoscaler-fips-1.31 —
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kubernetes-csi-external-attacher-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.30 —
eks-distro-kubernetes-csi-external-attacher-1.31 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.31 —
eks-distro-kubernetes-csi-external-attacher-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.32 —
eks-distro-kubernetes-csi-external-attacher-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.29 —
eks-distro-kubernetes-csi-external-attacher-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.31 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.31 —
eks-distro-kubernetes-csi-external-provisioner-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.32 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.29 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.31 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.31 —
eks-distro-kubernetes-csi-external-resizer-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.32 —
eks-distro-kubernetes-csi-external-resizer-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.29 —
eks-distro-kubernetes-csi-external-resizer-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.31 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.31 —
eks-distro-kubernetes-csi-external-snapshotter-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.31 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.31 —
eks-distro-kubernetes-csi-livenessprobe-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.32 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.29 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.31 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.31 —
eks-distro-kubernetes-csi-node-driver-registrar-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kubernetes-pause-compat-1.30 affected Chainguard eks-distro-kubernetes-pause-compat-1.30 —
eks-distro-kubernetes-pause-compat-1.31 affected Chainguard eks-distro-kubernetes-pause-compat-1.31 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
falco-no-driver affected Wolfi falco-no-driver —
falco-no-driver affected Chainguard falco-no-driver —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
k3s-1.32 affected Wolfi k3s-1.32 —
k3s-1.32 affected Chainguard k3s-1.32 —
k3s-1.33 affected Chainguard k3s-1.33 —
k3s-1.33 affected Wolfi k3s-1.33 —
k3s-multicall-1.32 affected Chainguard k3s-multicall-1.32 —
k3s-multicall-1.32 affected Wolfi k3s-multicall-1.32 —
k3s-multicall-1.33 affected Chainguard k3s-multicall-1.33 —
k3s-multicall-1.33 affected Wolfi k3s-multicall-1.33 —
k3s-static-1.32 affected Wolfi k3s-static-1.32 —
k3s-static-1.32 affected Chainguard k3s-static-1.32 —
k3s-static-1.33 affected Wolfi k3s-static-1.33 —
k3s-static-1.33 affected Chainguard k3s-static-1.33 —
kubeadm-1.30 affected Wolfi kubeadm-1.30 —
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Wolfi kubeadm-1.30-default —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kubeadm-1.30-default-compat affected Chainguard kubeadm-1.30-default-compat —
kube-apiserver-1.30 affected Wolfi kube-apiserver-1.30 —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-apiserver-1.30-default affected Wolfi kube-apiserver-1.30-default —
kube-apiserver-1.30-default-compat affected Chainguard kube-apiserver-1.30-default-compat —
kube-controller-manager-1.30 affected Wolfi kube-controller-manager-1.30 —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Wolfi kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default-compat affected Chainguard kube-controller-manager-1.30-default-compat —
kubectl-1.30 affected Wolfi kubectl-1.30 —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-1.30-default affected Wolfi kubectl-1.30-default —
kubectl-1.30-default-compat affected Chainguard kubectl-1.30-default-compat —
kubectl-1.30-iamguarded-compat affected Chainguard kubectl-1.30-iamguarded-compat —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubectl-bash-completion-1.30 affected Wolfi kubectl-bash-completion-1.30 —
kubelet-1.30 affected Wolfi kubelet-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kubelet-1.30-default affected Wolfi kubelet-1.30-default —
kubelet-1.30-default-compat affected Chainguard kubelet-1.30-default-compat —
kubelet-fips-1.32 affected Chainguard kubelet-fips-1.32 —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30 affected Wolfi kube-proxy-1.30 —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default affected Wolfi kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kube-proxy-1.32 affected Wolfi kube-proxy-1.32 —
kube-proxy-1.32 affected Chainguard kube-proxy-1.32 —
kubernetes-1.30 affected Wolfi kubernetes-1.30 —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-1.30-default affected Wolfi kubernetes-1.30-default —
kubernetes-1.32 affected Wolfi kubernetes-1.32 —
kubernetes-1.32 affected Chainguard kubernetes-1.32 —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kube-scheduler-1.30 affected Wolfi kube-scheduler-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
kube-scheduler-1.30-default affected Wolfi kube-scheduler-1.30-default —
kube-scheduler-1.30-default-compat affected Chainguard kube-scheduler-1.30-default-compat —
node-feature-discovery-0.17 affected Wolfi node-feature-discovery-0.17 —
node-feature-discovery-0.17 affected Chainguard node-feature-discovery-0.17 —
node-feature-discovery-0.18 affected Chainguard node-feature-discovery-0.18 —
node-feature-discovery-0.18 affected Wolfi node-feature-discovery-0.18 —
node-feature-discovery-fips-0.16 affected Chainguard node-feature-discovery-fips-0.16 —
node-feature-discovery-fips-0.16-gc affected Chainguard node-feature-discovery-fips-0.16-gc —
node-feature-discovery-fips-0.16-kubectl-nfd affected Chainguard node-feature-discovery-fips-0.16-kubectl-nfd —
node-feature-discovery-fips-0.16-master affected Chainguard node-feature-discovery-fips-0.16-master —
node-feature-discovery-fips-0.16-topology-updater affected Chainguard node-feature-discovery-fips-0.16-topology-updater —
node-feature-discovery-fips-0.16-worker affected Chainguard node-feature-discovery-fips-0.16-worker —
nvidia-container-toolkit-nvidia-cdi-hook affected Wolfi nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-cdi-hook affected Chainguard nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-ctk affected Wolfi nvidia-container-toolkit-nvidia-ctk —
nvidia-container-toolkit-nvidia-ctk affected Chainguard nvidia-container-toolkit-nvidia-ctk —
podman affected Chainguard podman —
podman affected Wolfi podman —
podman-doc affected Wolfi podman-doc —
podman-doc affected Chainguard podman-doc —
prometheus-podman-exporter affected Wolfi prometheus-podman-exporter —
prometheus-podman-exporter affected Chainguard prometheus-podman-exporter —
prometheus-podman-exporter-compat affected Wolfi prometheus-podman-exporter-compat —
prometheus-podman-exporter-compat affected Chainguard prometheus-podman-exporter-compat —
rancher-2.10 affected Chainguard rancher-2.10 —
rancher-2.10 affected Wolfi rancher-2.10 —
rancher-agent-2.11 affected Chainguard rancher-agent-2.11 —
rancher-agent-2.11 affected Wolfi rancher-agent-2.11 —
rancher-agent-2.9 affected Chainguard rancher-agent-2.9 —
rancher-agent-2.9 affected Wolfi rancher-agent-2.9 —
rke2-runtime-1.31 affected Chainguard rke2-runtime-1.31 —
rke2-runtime-1.31-charts affected Chainguard rke2-runtime-1.31-charts —
sriov-network-device-plugin affected Wolfi sriov-network-device-plugin —
sriov-network-device-plugin affected Chainguard sriov-network-device-plugin —
sriov-network-device-plugin-entrypoint affected Chainguard sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-entrypoint affected Wolfi sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-fips affected Chainguard sriov-network-device-plugin-fips —
virt-api-1.8 affected Chainguard virt-api-1.8 —
virt-api-fips-1.8 affected Chainguard virt-api-fips-1.8 —
virt-chroot-1.6 affected Chainguard virt-chroot-1.6 —
virt-chroot-1.7 affected Chainguard virt-chroot-1.7 —
virt-chroot-fips-1.6 affected Chainguard virt-chroot-fips-1.6 —
virt-chroot-fips-1.7 affected Chainguard virt-chroot-fips-1.7 —
virt-controller-1.8 affected Chainguard virt-controller-1.8 —
virt-controller-fips-1.8 affected Chainguard virt-controller-fips-1.8 —
virt-handler-1.6 affected Chainguard virt-handler-1.6 —
virt-handler-1.7 affected Chainguard virt-handler-1.7 —
virt-handler-fips-1.6 affected Chainguard virt-handler-fips-1.6 —
virt-handler-fips-1.7 affected Chainguard virt-handler-fips-1.7 —
virt-operator-1.8 affected Chainguard virt-operator-1.8 —
virt-operator-fips-1.8 affected Chainguard virt-operator-fips-1.8 —
Upstream advisory

CGA-rh6x-x8xr-226p

Open SourceCoalition ESS > 63%2026-01-28

CGA-rh6x-x8xr-226p

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
Upstream advisory

CGA-jm25-ffq2-4jch

Open SourceCoalition ESS > 63%2026-01-28

CGA-jm25-ffq2-4jch

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
Upstream advisory

CGA-hhwh-w49r-ww24

Open SourceCoalition ESS > 63%2026-01-28

CGA-hhwh-w49r-ww24

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
Upstream advisory

CGA-g2wp-gwc5-q387

Open SourceCoalition ESS > 63%2026-01-28

CGA-g2wp-gwc5-q387

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
Upstream advisory

CGA-c9rv-58gv-3cj4

Open SourceCoalition ESS > 63%2026-01-28

CGA-c9rv-58gv-3cj4

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
Upstream advisory

CGA-8gv6-w4qj-5q4c

Open SourceCoalition ESS > 63%2026-01-28

CGA-8gv6-w4qj-5q4c

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
Upstream advisory

CGA-82m8-29h7-xq2h

Open SourceCoalition ESS > 63%2026-01-28

CGA-82m8-29h7-xq2h

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kubeadm-fips-1.30-default-compat affected Chainguard kubeadm-fips-1.30-default-compat —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-apiserver-fips-1.30-default-compat affected Chainguard kube-apiserver-fips-1.30-default-compat —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kube-controller-manager-fips-1.30-default-compat affected Chainguard kube-controller-manager-fips-1.30-default-compat —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubectl-fips-1.30-default-compat affected Chainguard kubectl-fips-1.30-default-compat —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kubelet-fips-1.30-default-compat affected Chainguard kubelet-fips-1.30-default-compat —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kube-proxy-fips-1.30-default-compat affected Chainguard kube-proxy-fips-1.30-default-compat —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
kube-scheduler-fips-1.30-default-compat affected Chainguard kube-scheduler-fips-1.30-default-compat —
Upstream advisory

CGA-684j-9c2g-g28m

Open SourceCoalition ESS > 63%2026-01-28

CGA-684j-9c2g-g28m

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
Upstream advisory

CGA-3whg-8mjg-92j9

GoogleCoalition ESS > 63%2026-01-28

CGA-3whg-8mjg-92j9

Affected products

ProductStatusVendorPackageEcosystem
google-osconfig-agent affected Chainguard google-osconfig-agent —
Upstream advisory

CGA-2xp7-7w7f-2rmq

Open SourceCoalition ESS > 63%2026-01-28

CGA-2xp7-7w7f-2rmq

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-driver-nfs affected Chainguard kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs affected Wolfi kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs-compat affected Chainguard kubernetes-csi-driver-nfs-compat —
kubernetes-csi-driver-nfs-compat affected Wolfi kubernetes-csi-driver-nfs-compat —
Upstream advisory

CGA-269x-5crw-6hmw

Open SourceCoalition ESS > 63%2026-01-28

CGA-269x-5crw-6hmw

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
Upstream advisory

MINI-hp4q-52mg-xv5f

Open SourceCoalition ESS > 63%2026-01-27

MINI-hp4q-52mg-xv5f

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-fips-1.34 affected MinimOS eks-kube-apiserver-fips-1.34 —
eks-kube-apiserver-fips-1.34-compat affected MinimOS eks-kube-apiserver-fips-1.34-compat —
eks-kube-controller-manager-fips-1.34 affected MinimOS eks-kube-controller-manager-fips-1.34 —
eks-kube-controller-manager-fips-1.34-compat affected MinimOS eks-kube-controller-manager-fips-1.34-compat —
eks-kubectl-fips-1.34 affected MinimOS eks-kubectl-fips-1.34 —
eks-kubectl-fips-1.34-compat affected MinimOS eks-kubectl-fips-1.34-compat —
eks-kubelet-fips-1.34 affected MinimOS eks-kubelet-fips-1.34 —
eks-kubelet-fips-1.34-compat affected MinimOS eks-kubelet-fips-1.34-compat —
eks-kube-proxy-fips-1.34 affected MinimOS eks-kube-proxy-fips-1.34 —
eks-kube-proxy-fips-1.34-compat affected MinimOS eks-kube-proxy-fips-1.34-compat —
eks-kubernetes-fips-1.34 affected MinimOS eks-kubernetes-fips-1.34 —
eks-kube-scheduler-fips-1.34 affected MinimOS eks-kube-scheduler-fips-1.34 —
eks-kube-scheduler-fips-1.34-compat affected MinimOS eks-kube-scheduler-fips-1.34-compat —
Upstream advisory

MINI-3mj7-h29w-ph56

Open SourceCoalition ESS > 63%2026-01-27

MINI-3mj7-h29w-ph56

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-1.34 affected MinimOS eks-kube-apiserver-1.34 —
eks-kube-apiserver-1.34-compat affected MinimOS eks-kube-apiserver-1.34-compat —
eks-kube-controller-manager-1.34 affected MinimOS eks-kube-controller-manager-1.34 —
eks-kube-controller-manager-1.34-compat affected MinimOS eks-kube-controller-manager-1.34-compat —
eks-kubectl-1.34 affected MinimOS eks-kubectl-1.34 —
eks-kubectl-1.34-compat affected MinimOS eks-kubectl-1.34-compat —
eks-kubelet-1.34 affected MinimOS eks-kubelet-1.34 —
eks-kubelet-1.34-compat affected MinimOS eks-kubelet-1.34-compat —
eks-kube-proxy-1.34 affected MinimOS eks-kube-proxy-1.34 —
eks-kube-proxy-1.34-compat affected MinimOS eks-kube-proxy-1.34-compat —
eks-kubernetes-1.34 affected MinimOS eks-kubernetes-1.34 —
eks-kube-scheduler-1.34 affected MinimOS eks-kube-scheduler-1.34 —
eks-kube-scheduler-1.34-compat affected MinimOS eks-kube-scheduler-1.34-compat —
Upstream advisory

MINI-qf85-r74g-4wpg

Open SourceCoalition ESS > 63%2026-01-26

MINI-qf85-r74g-4wpg

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-fips-1.33 affected MinimOS eks-kube-apiserver-fips-1.33 —
eks-kube-apiserver-fips-1.33-compat affected MinimOS eks-kube-apiserver-fips-1.33-compat —
eks-kube-controller-manager-fips-1.33 affected MinimOS eks-kube-controller-manager-fips-1.33 —
eks-kube-controller-manager-fips-1.33-compat affected MinimOS eks-kube-controller-manager-fips-1.33-compat —
eks-kubectl-fips-1.33 affected MinimOS eks-kubectl-fips-1.33 —
eks-kubectl-fips-1.33-compat affected MinimOS eks-kubectl-fips-1.33-compat —
eks-kubelet-fips-1.33 affected MinimOS eks-kubelet-fips-1.33 —
eks-kubelet-fips-1.33-compat affected MinimOS eks-kubelet-fips-1.33-compat —
eks-kube-proxy-fips-1.33 affected MinimOS eks-kube-proxy-fips-1.33 —
eks-kube-proxy-fips-1.33-compat affected MinimOS eks-kube-proxy-fips-1.33-compat —
eks-kubernetes-fips-1.33 affected MinimOS eks-kubernetes-fips-1.33 —
eks-kube-scheduler-fips-1.33 affected MinimOS eks-kube-scheduler-fips-1.33 —
eks-kube-scheduler-fips-1.33-compat affected MinimOS eks-kube-scheduler-fips-1.33-compat —
Upstream advisory

MINI-hg5x-5qvv-mhr6

Open SourceCoalition ESS > 63%2026-01-26

MINI-hg5x-5qvv-mhr6

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-1.33 affected MinimOS eks-kube-apiserver-1.33 —
eks-kube-apiserver-1.33-compat affected MinimOS eks-kube-apiserver-1.33-compat —
eks-kube-controller-manager-1.33 affected MinimOS eks-kube-controller-manager-1.33 —
eks-kube-controller-manager-1.33-compat affected MinimOS eks-kube-controller-manager-1.33-compat —
eks-kubectl-1.33 affected MinimOS eks-kubectl-1.33 —
eks-kubectl-1.33-compat affected MinimOS eks-kubectl-1.33-compat —
eks-kubelet-1.33 affected MinimOS eks-kubelet-1.33 —
eks-kubelet-1.33-compat affected MinimOS eks-kubelet-1.33-compat —
eks-kube-proxy-1.33 affected MinimOS eks-kube-proxy-1.33 —
eks-kube-proxy-1.33-compat affected MinimOS eks-kube-proxy-1.33-compat —
eks-kubernetes-1.33 affected MinimOS eks-kubernetes-1.33 —
eks-kube-scheduler-1.33 affected MinimOS eks-kube-scheduler-1.33 —
eks-kube-scheduler-1.33-compat affected MinimOS eks-kube-scheduler-1.33-compat —
Upstream advisory

MINI-m283-2mf8-vfh5

Open SourceCoalition ESS > 63%2026-01-25

MINI-m283-2mf8-vfh5

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-fips-1.32 affected MinimOS eks-kube-apiserver-fips-1.32 —
eks-kube-apiserver-fips-1.32-compat affected MinimOS eks-kube-apiserver-fips-1.32-compat —
eks-kube-controller-manager-fips-1.32 affected MinimOS eks-kube-controller-manager-fips-1.32 —
eks-kube-controller-manager-fips-1.32-compat affected MinimOS eks-kube-controller-manager-fips-1.32-compat —
eks-kubectl-fips-1.32 affected MinimOS eks-kubectl-fips-1.32 —
eks-kubectl-fips-1.32-compat affected MinimOS eks-kubectl-fips-1.32-compat —
eks-kubelet-fips-1.32 affected MinimOS eks-kubelet-fips-1.32 —
eks-kubelet-fips-1.32-compat affected MinimOS eks-kubelet-fips-1.32-compat —
eks-kube-proxy-fips-1.32 affected MinimOS eks-kube-proxy-fips-1.32 —
eks-kube-proxy-fips-1.32-compat affected MinimOS eks-kube-proxy-fips-1.32-compat —
eks-kubernetes-fips-1.32 affected MinimOS eks-kubernetes-fips-1.32 —
eks-kube-scheduler-fips-1.32 affected MinimOS eks-kube-scheduler-fips-1.32 —
eks-kube-scheduler-fips-1.32-compat affected MinimOS eks-kube-scheduler-fips-1.32-compat —
Upstream advisory

MINI-cc4v-j8mf-pp22

Open SourceCoalition ESS > 63%2026-01-25

MINI-cc4v-j8mf-pp22

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-fips-1.32 affected MinimOS eks-kube-apiserver-fips-1.32 —
eks-kube-apiserver-fips-1.32-compat affected MinimOS eks-kube-apiserver-fips-1.32-compat —
eks-kube-controller-manager-fips-1.32 affected MinimOS eks-kube-controller-manager-fips-1.32 —
eks-kube-controller-manager-fips-1.32-compat affected MinimOS eks-kube-controller-manager-fips-1.32-compat —
eks-kubectl-fips-1.32 affected MinimOS eks-kubectl-fips-1.32 —
eks-kubectl-fips-1.32-compat affected MinimOS eks-kubectl-fips-1.32-compat —
eks-kubelet-fips-1.32 affected MinimOS eks-kubelet-fips-1.32 —
eks-kubelet-fips-1.32-compat affected MinimOS eks-kubelet-fips-1.32-compat —
eks-kube-proxy-fips-1.32 affected MinimOS eks-kube-proxy-fips-1.32 —
eks-kube-proxy-fips-1.32-compat affected MinimOS eks-kube-proxy-fips-1.32-compat —
eks-kubernetes-fips-1.32 affected MinimOS eks-kubernetes-fips-1.32 —
eks-kube-scheduler-fips-1.32 affected MinimOS eks-kube-scheduler-fips-1.32 —
eks-kube-scheduler-fips-1.32-compat affected MinimOS eks-kube-scheduler-fips-1.32-compat —
Upstream advisory

MINI-3ch9-64mf-2mrc

Open SourceCoalition ESS > 63%2026-01-25

MINI-3ch9-64mf-2mrc

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-1.32 affected MinimOS eks-kube-apiserver-1.32 —
eks-kube-apiserver-1.32-compat affected MinimOS eks-kube-apiserver-1.32-compat —
eks-kube-controller-manager-1.32 affected MinimOS eks-kube-controller-manager-1.32 —
eks-kube-controller-manager-1.32-compat affected MinimOS eks-kube-controller-manager-1.32-compat —
eks-kubectl-1.32 affected MinimOS eks-kubectl-1.32 —
eks-kubectl-1.32-compat affected MinimOS eks-kubectl-1.32-compat —
eks-kubelet-1.32 affected MinimOS eks-kubelet-1.32 —
eks-kubelet-1.32-compat affected MinimOS eks-kubelet-1.32-compat —
eks-kube-proxy-1.32 affected MinimOS eks-kube-proxy-1.32 —
eks-kube-proxy-1.32-compat affected MinimOS eks-kube-proxy-1.32-compat —
eks-kubernetes-1.32 affected MinimOS eks-kubernetes-1.32 —
eks-kube-scheduler-1.32 affected MinimOS eks-kube-scheduler-1.32 —
eks-kube-scheduler-1.32-compat affected MinimOS eks-kube-scheduler-1.32-compat —
Upstream advisory

MINI-gxww-6px3-jr2v

Open SourceCoalition ESS > 63%2026-01-25

MINI-gxww-6px3-jr2v

Affected products

ProductStatusVendorPackageEcosystem
eks-kube-apiserver-1.32 affected MinimOS eks-kube-apiserver-1.32 —
eks-kube-apiserver-1.32-compat affected MinimOS eks-kube-apiserver-1.32-compat —
eks-kube-controller-manager-1.32 affected MinimOS eks-kube-controller-manager-1.32 —
eks-kube-controller-manager-1.32-compat affected MinimOS eks-kube-controller-manager-1.32-compat —
eks-kubectl-1.32 affected MinimOS eks-kubectl-1.32 —
eks-kubectl-1.32-compat affected MinimOS eks-kubectl-1.32-compat —
eks-kubelet-1.32 affected MinimOS eks-kubelet-1.32 —
eks-kubelet-1.32-compat affected MinimOS eks-kubelet-1.32-compat —
eks-kube-proxy-1.32 affected MinimOS eks-kube-proxy-1.32 —
eks-kube-proxy-1.32-compat affected MinimOS eks-kube-proxy-1.32-compat —
eks-kubernetes-1.32 affected MinimOS eks-kubernetes-1.32 —
eks-kube-scheduler-1.32 affected MinimOS eks-kube-scheduler-1.32 —
eks-kube-scheduler-1.32-compat affected MinimOS eks-kube-scheduler-1.32-compat —
Upstream advisory

CGA-6mg2-mjwq-xq6r

Open SourceCoalition ESS > 63%2026-01-11

CGA-6mg2-mjwq-xq6r

Affected products

ProductStatusVendorPackageEcosystem
amazon-k8s-cni-fips affected Chainguard amazon-k8s-cni-fips —
amazon-k8s-cni-init-fips affected Chainguard amazon-k8s-cni-init-fips —
amazon-k8s-cni-init-fips-compat affected Chainguard amazon-k8s-cni-init-fips-compat —
azure-container-networking affected Chainguard azure-container-networking —
azure-vnet-cni affected Chainguard azure-vnet-cni —
blob-csi-1.23 affected Chainguard blob-csi-1.23 —
blob-csi-1.23-compat affected Chainguard blob-csi-1.23-compat —
blob-csi-1.24 affected Chainguard blob-csi-1.24 —
blob-csi-1.24-compat affected Chainguard blob-csi-1.24-compat —
blob-csi-1.25 affected Chainguard blob-csi-1.25 —
blob-csi-1.25-compat affected Chainguard blob-csi-1.25-compat —
blob-csi-1.26 affected Wolfi blob-csi-1.26 —
blob-csi-1.26 affected Chainguard blob-csi-1.26 —
blob-csi-1.26-compat affected Wolfi blob-csi-1.26-compat —
blob-csi-1.26-compat affected Chainguard blob-csi-1.26-compat —
blob-csi-fips-1.23 affected Chainguard blob-csi-fips-1.23 —
blob-csi-fips-1.23-compat affected Chainguard blob-csi-fips-1.23-compat —
blob-csi-fips-1.24 affected Chainguard blob-csi-fips-1.24 —
blob-csi-fips-1.24-compat affected Chainguard blob-csi-fips-1.24-compat —
buildah affected Chainguard buildah —
buildah affected Wolfi buildah —
cg affected Chainguard cg —
chainctl affected Chainguard chainctl —
checksec affected Chainguard checksec —
checksec affected Wolfi checksec —
cloudbeat-fips-9.2 affected Chainguard cloudbeat-fips-9.2 —
cluster-autoscaler-1.31 affected Wolfi cluster-autoscaler-1.31 —
cluster-autoscaler-1.31 affected Chainguard cluster-autoscaler-1.31 —
cluster-autoscaler-fips-1.31 affected Chainguard cluster-autoscaler-fips-1.31 —
cni-plugins-fips affected Chainguard cni-plugins-fips —
cni-plugins-fips-bandwidth affected Chainguard cni-plugins-fips-bandwidth —
cni-plugins-fips-bandwidth-compat affected Chainguard cni-plugins-fips-bandwidth-compat —
cni-plugins-fips-bridge affected Chainguard cni-plugins-fips-bridge —
cni-plugins-fips-bridge-compat affected Chainguard cni-plugins-fips-bridge-compat —
cni-plugins-fips-dhcp affected Chainguard cni-plugins-fips-dhcp —
cni-plugins-fips-dhcp-compat affected Chainguard cni-plugins-fips-dhcp-compat —
cni-plugins-fips-dummy affected Chainguard cni-plugins-fips-dummy —
cni-plugins-fips-dummy-compat affected Chainguard cni-plugins-fips-dummy-compat —
cni-plugins-fips-firewall affected Chainguard cni-plugins-fips-firewall —
cni-plugins-fips-firewall-compat affected Chainguard cni-plugins-fips-firewall-compat —
cni-plugins-fips-host-device affected Chainguard cni-plugins-fips-host-device —
cni-plugins-fips-host-device-compat affected Chainguard cni-plugins-fips-host-device-compat —
cni-plugins-fips-host-local affected Chainguard cni-plugins-fips-host-local —
cni-plugins-fips-host-local-compat affected Chainguard cni-plugins-fips-host-local-compat —
cni-plugins-fips-ipam affected Chainguard cni-plugins-fips-ipam —
cni-plugins-fips-ipvlan affected Chainguard cni-plugins-fips-ipvlan —
cni-plugins-fips-ipvlan-compat affected Chainguard cni-plugins-fips-ipvlan-compat —
cni-plugins-fips-loopback affected Chainguard cni-plugins-fips-loopback —
cni-plugins-fips-loopback-compat affected Chainguard cni-plugins-fips-loopback-compat —
cni-plugins-fips-macvlan affected Chainguard cni-plugins-fips-macvlan —
cni-plugins-fips-macvlan-compat affected Chainguard cni-plugins-fips-macvlan-compat —
cni-plugins-fips-main affected Chainguard cni-plugins-fips-main —
cni-plugins-fips-meta affected Chainguard cni-plugins-fips-meta —
cni-plugins-fips-portmap affected Chainguard cni-plugins-fips-portmap —
cni-plugins-fips-portmap-compat affected Chainguard cni-plugins-fips-portmap-compat —
cni-plugins-fips-ptp affected Chainguard cni-plugins-fips-ptp —
cni-plugins-fips-ptp-compat affected Chainguard cni-plugins-fips-ptp-compat —
cni-plugins-fips-sbr affected Chainguard cni-plugins-fips-sbr —
cni-plugins-fips-sbr-compat affected Chainguard cni-plugins-fips-sbr-compat —
cni-plugins-fips-static affected Chainguard cni-plugins-fips-static —
cni-plugins-fips-static-compat affected Chainguard cni-plugins-fips-static-compat —
cni-plugins-fips-tuning affected Chainguard cni-plugins-fips-tuning —
cni-plugins-fips-tuning-compat affected Chainguard cni-plugins-fips-tuning-compat —
cni-plugins-fips-vlan affected Chainguard cni-plugins-fips-vlan —
cni-plugins-fips-vlan-compat affected Chainguard cni-plugins-fips-vlan-compat —
containerd-1 affected Chainguard containerd-1 —
containerd-1 affected Wolfi containerd-1 —
containerd-fips affected Chainguard containerd-fips —
containerd-service-1 affected Chainguard containerd-service-1 —
containerd-service-1 affected Wolfi containerd-service-1 —
containerd-service-1.7 affected Chainguard containerd-service-1.7 —
containerd-service-1.7 affected Wolfi containerd-service-1.7 —
containerd-shim-runc-v2-1 affected Chainguard containerd-shim-runc-v2-1 —
containerd-shim-runc-v2-1 affected Wolfi containerd-shim-runc-v2-1 —
containerd-shim-runc-v2-1.7 affected Chainguard containerd-shim-runc-v2-1.7 —
containerd-shim-runc-v2-1.7 affected Wolfi containerd-shim-runc-v2-1.7 —
containerd-stress-1 affected Chainguard containerd-stress-1 —
containerd-stress-1 affected Wolfi containerd-stress-1 —
containerd-stress-1.7 affected Chainguard containerd-stress-1.7 —
containerd-stress-1.7 affected Wolfi containerd-stress-1.7 —
containerd-stress-fips affected Chainguard containerd-stress-fips —
ctr-1 affected Wolfi ctr-1 —
ctr-1 affected Chainguard ctr-1 —
ctr-1.7 affected Wolfi ctr-1.7 —
ctr-1.7 affected Chainguard ctr-1.7 —
dagger affected Chainguard dagger —
dagger affected Wolfi dagger —
datadog-agent affected Wolfi datadog-agent —
datadog-agent affected Chainguard datadog-agent —
datadog-agent-7.71 affected Chainguard datadog-agent-7.71 —
datadog-agent-7.71-core-integrations affected Chainguard datadog-agent-7.71-core-integrations —
datadog-agent-7.71-fakeintake affected Chainguard datadog-agent-7.71-fakeintake —
datadog-agent-7.71-jmx affected Chainguard datadog-agent-7.71-jmx —
datadog-agent-7.71-oci-compat affected Chainguard datadog-agent-7.71-oci-compat —
datadog-agent-7.71-s6-overlay affected Chainguard datadog-agent-7.71-s6-overlay —
datadog-agent-core-integrations affected Chainguard datadog-agent-core-integrations —
datadog-agent-core-integrations affected Wolfi datadog-agent-core-integrations —
datadog-agent-core-integrations-fips affected Chainguard datadog-agent-core-integrations-fips —
datadog-agent-fakeintake affected Chainguard datadog-agent-fakeintake —
datadog-agent-fakeintake affected Wolfi datadog-agent-fakeintake —
datadog-agent-fakeintake-fips affected Chainguard datadog-agent-fakeintake-fips —
datadog-agent-fips affected Chainguard datadog-agent-fips —
datadog-agent-fips-7.71 affected Chainguard datadog-agent-fips-7.71 —
datadog-agent-fips-7.71-core-integrations affected Chainguard datadog-agent-fips-7.71-core-integrations —
datadog-agent-fips-7.71-fakeintake affected Chainguard datadog-agent-fips-7.71-fakeintake —
datadog-agent-fips-7.71-jmx affected Chainguard datadog-agent-fips-7.71-jmx —
datadog-agent-fips-7.71-oci-compat affected Chainguard datadog-agent-fips-7.71-oci-compat —
datadog-agent-fips-7.71-s6-overlay affected Chainguard datadog-agent-fips-7.71-s6-overlay —
datadog-agent-jmx affected Wolfi datadog-agent-jmx —
datadog-agent-jmx affected Chainguard datadog-agent-jmx —
datadog-agent-jmx-fips affected Chainguard datadog-agent-jmx-fips —
datadog-agent-oci-compat affected Chainguard datadog-agent-oci-compat —
datadog-agent-oci-compat affected Wolfi datadog-agent-oci-compat —
datadog-agent-oci-compat-fips affected Chainguard datadog-agent-oci-compat-fips —
datadog-agent-s6-overlay affected Wolfi datadog-agent-s6-overlay —
datadog-agent-s6-overlay affected Chainguard datadog-agent-s6-overlay —
datadog-agent-s6-overlay-fips affected Chainguard datadog-agent-s6-overlay-fips —
datadog-cluster-agent affected Wolfi datadog-cluster-agent —
datadog-cluster-agent affected Chainguard datadog-cluster-agent —
datadog-cluster-agent-7.71 affected Chainguard datadog-cluster-agent-7.71 —
datadog-cluster-agent-7.71-oci-compat affected Chainguard datadog-cluster-agent-7.71-oci-compat —
datadog-cluster-agent-fips-7.71 affected Chainguard datadog-cluster-agent-fips-7.71 —
datadog-cluster-agent-fips-7.71-oci-compat affected Chainguard datadog-cluster-agent-fips-7.71-oci-compat —
datadog-cluster-agent-oci-compat affected Wolfi datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat affected Chainguard datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat-fips affected Chainguard datadog-cluster-agent-oci-compat-fips —
docker affected Wolfi docker —
docker affected Chainguard docker —
docker-config-mirror-gcr-fips affected Chainguard docker-config-mirror-gcr-fips —
docker-credential-cgr affected Chainguard docker-credential-cgr —
dockerd affected Chainguard dockerd —
dockerd affected Wolfi dockerd —
dockerd-fips affected Chainguard dockerd-fips —
docker-dind-compat affected Chainguard docker-dind-compat —
docker-dind-compat affected Wolfi docker-dind-compat —
dockerd-oci-entrypoint-fips affected Chainguard dockerd-oci-entrypoint-fips —
dockerd-service-fips affected Chainguard dockerd-service-fips —
docker-fips affected Chainguard docker-fips —
docker-init-fips affected Chainguard docker-init-fips —
docker-modprobe-compat affected Chainguard docker-modprobe-compat —
docker-modprobe-compat affected Wolfi docker-modprobe-compat —
docker-oci-entrypoint-fips affected Chainguard docker-oci-entrypoint-fips —
docker-rootless-fips affected Chainguard docker-rootless-fips —
dogstatsd affected Wolfi dogstatsd —
dogstatsd affected Chainguard dogstatsd —
dogstatsd-7.71 affected Chainguard dogstatsd-7.71 —
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-1.33 affected Chainguard eks-distro-1.33 —
eks-distro-1.34 affected Chainguard eks-distro-1.34 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-1.33 affected Chainguard eks-distro-coredns-1.33 —
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-coredns-fips-1.33 affected Chainguard eks-distro-coredns-fips-1.33 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-fips-1.33 affected Chainguard eks-distro-fips-1.33 —
eks-distro-kube-apiserver-1.29 affected Chainguard eks-distro-kube-apiserver-1.29 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-1.33 affected Chainguard eks-distro-kube-apiserver-1.33 —
eks-distro-kube-apiserver-1.34 affected Chainguard eks-distro-kube-apiserver-1.34 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-apiserver-fips-1.32 affected Chainguard eks-distro-kube-apiserver-fips-1.32 —
eks-distro-kube-apiserver-fips-1.33 affected Chainguard eks-distro-kube-apiserver-fips-1.33 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-1.33 affected Chainguard eks-distro-kube-controller-manager-1.33 —
eks-distro-kube-controller-manager-1.34 affected Chainguard eks-distro-kube-controller-manager-1.34 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-controller-manager-fips-1.33 affected Chainguard eks-distro-kube-controller-manager-fips-1.33 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-1.33 affected Chainguard eks-distro-kube-proxy-1.33 —
eks-distro-kube-proxy-1.34 affected Chainguard eks-distro-kube-proxy-1.34 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kube-proxy-fips-1.33 affected Chainguard eks-distro-kube-proxy-fips-1.33 —
eks-distro-kubernetes-csi-external-attacher-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.30 —
eks-distro-kubernetes-csi-external-attacher-1.31 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.31 —
eks-distro-kubernetes-csi-external-attacher-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.32 —
eks-distro-kubernetes-csi-external-attacher-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.33 —
eks-distro-kubernetes-csi-external-attacher-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.29 —
eks-distro-kubernetes-csi-external-attacher-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.30 —
eks-distro-kubernetes-csi-external-attacher-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.33 —
eks-distro-kubernetes-csi-external-provisioner-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.31 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.31 —
eks-distro-kubernetes-csi-external-provisioner-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.32 —
eks-distro-kubernetes-csi-external-provisioner-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.33 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.29 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.30 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.33 —
eks-distro-kubernetes-csi-external-resizer-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.31 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.31 —
eks-distro-kubernetes-csi-external-resizer-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.32 —
eks-distro-kubernetes-csi-external-resizer-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.33 —
eks-distro-kubernetes-csi-external-resizer-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.29 —
eks-distro-kubernetes-csi-external-resizer-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.30 —
eks-distro-kubernetes-csi-external-resizer-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.31 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.33 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.31 —
eks-distro-kubernetes-csi-external-snapshotter-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.33 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.33 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.31 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.31 —
eks-distro-kubernetes-csi-livenessprobe-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.32 —
eks-distro-kubernetes-csi-livenessprobe-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.33 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.29 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.30 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.31 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.31 —
eks-distro-kubernetes-csi-node-driver-registrar-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.33 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.33 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kubernetes-pause-1.33 affected Chainguard eks-distro-kubernetes-pause-1.33 —
eks-distro-kubernetes-pause-1.34 affected Chainguard eks-distro-kubernetes-pause-1.34 —
eks-distro-kubernetes-pause-compat-1.30 affected Chainguard eks-distro-kubernetes-pause-compat-1.30 —
eks-distro-kubernetes-pause-compat-1.31 affected Chainguard eks-distro-kubernetes-pause-compat-1.31 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-1.33 affected Chainguard eks-distro-kube-scheduler-1.33 —
eks-distro-kube-scheduler-1.34 affected Chainguard eks-distro-kube-scheduler-1.34 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
eks-distro-kube-scheduler-fips-1.33 affected Chainguard eks-distro-kube-scheduler-fips-1.33 —
envoy-gateway-egctl affected Chainguard envoy-gateway-egctl —
envoy-gateway-egctl affected Wolfi envoy-gateway-egctl —
envoy-gateway-fips-egctl affected Chainguard envoy-gateway-fips-egctl —
falco-no-driver affected Chainguard falco-no-driver —
falco-no-driver affected Wolfi falco-no-driver —
google-osconfig-agent affected Chainguard google-osconfig-agent —
gpu-feature-discovery affected Wolfi gpu-feature-discovery —
gpu-feature-discovery affected Chainguard gpu-feature-discovery —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
grype affected Chainguard grype —
grype affected Wolfi grype —
grype-db affected Chainguard grype-db —
grype-db-manager affected Chainguard grype-db-manager —
grype-fips affected Chainguard grype-fips —
k3s affected Wolfi k3s —
k3s affected Chainguard k3s —
k3s-1.31 affected Chainguard k3s-1.31 —
k3s-1.32 affected Wolfi k3s-1.32 —
k3s-1.32 affected Chainguard k3s-1.32 —
k3s-1.33 affected Chainguard k3s-1.33 —
k3s-1.33 affected Wolfi k3s-1.33 —
k3s-embedded affected Wolfi k3s-embedded —
k3s-embedded affected Chainguard k3s-embedded —
k3s-images affected Wolfi k3s-images —
k3s-images affected Chainguard k3s-images —
k3s-multicall affected Chainguard k3s-multicall —
k3s-multicall affected Wolfi k3s-multicall —
k3s-multicall-1.31 affected Chainguard k3s-multicall-1.31 —
k3s-multicall-1.32 affected Wolfi k3s-multicall-1.32 —
k3s-multicall-1.32 affected Chainguard k3s-multicall-1.32 —
k3s-multicall-1.33 affected Wolfi k3s-multicall-1.33 —
k3s-multicall-1.33 affected Chainguard k3s-multicall-1.33 —
k3s-static affected Chainguard k3s-static —
k3s-static affected Wolfi k3s-static —
k3s-static-1.31 affected Chainguard k3s-static-1.31 —
k3s-static-1.32 affected Chainguard k3s-static-1.32 —
k3s-static-1.32 affected Wolfi k3s-static-1.32 —
k3s-static-1.33 affected Wolfi k3s-static-1.33 —
k3s-static-1.33 affected Chainguard k3s-static-1.33 —
k8s-device-plugin affected Chainguard k8s-device-plugin —
k8s-device-plugin affected Wolfi k8s-device-plugin —
k8s-device-plugin-fips affected Chainguard k8s-device-plugin-fips —
k9s affected Wolfi k9s —
k9s affected Chainguard k9s —
k9s-fips affected Chainguard k9s-fips —
kaniko-fips affected Chainguard kaniko-fips —
kaniko-warmer-fips affected Chainguard kaniko-warmer-fips —
kots affected Wolfi kots —
kots affected Chainguard kots —
kubeadm-1.30 affected Wolfi kubeadm-1.30 —
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Wolfi kubeadm-1.30-default —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kubeadm-1.30-default-compat affected Chainguard kubeadm-1.30-default-compat —
kubeadm-1.34 affected Wolfi kubeadm-1.34 —
kubeadm-1.34 affected Chainguard kubeadm-1.34 —
kubeadm-1.34-default-compat affected Chainguard kubeadm-1.34-default-compat —
kubeadm-1.34-default-compat affected Wolfi kubeadm-1.34-default-compat —
kubeadm-fips-1.30 affected Chainguard kubeadm-fips-1.30 —
kubeadm-fips-1.30-default affected Chainguard kubeadm-fips-1.30-default —
kubeadm-fips-1.30-default-compat affected Chainguard kubeadm-fips-1.30-default-compat —
kube-apiserver-1.30 affected Wolfi kube-apiserver-1.30 —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-apiserver-1.30-default affected Wolfi kube-apiserver-1.30-default —
kube-apiserver-1.30-default-compat affected Chainguard kube-apiserver-1.30-default-compat —
kube-apiserver-1.34 affected Wolfi kube-apiserver-1.34 —
kube-apiserver-1.34 affected Chainguard kube-apiserver-1.34 —
kube-apiserver-1.34-default affected Chainguard kube-apiserver-1.34-default —
kube-apiserver-1.34-default affected Wolfi kube-apiserver-1.34-default —
kube-apiserver-1.34-default-compat affected Wolfi kube-apiserver-1.34-default-compat —
kube-apiserver-1.34-default-compat affected Chainguard kube-apiserver-1.34-default-compat —
kube-apiserver-fips-1.30 affected Chainguard kube-apiserver-fips-1.30 —
kube-apiserver-fips-1.30-default affected Chainguard kube-apiserver-fips-1.30-default —
kube-apiserver-fips-1.30-default-compat affected Chainguard kube-apiserver-fips-1.30-default-compat —
kube-apiserver-fips-1.31 affected Chainguard kube-apiserver-fips-1.31 —
kube-apiserver-fips-1.32 affected Chainguard kube-apiserver-fips-1.32 —
kube-apiserver-fips-1.34-default-compat affected Chainguard kube-apiserver-fips-1.34-default-compat —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30 affected Wolfi kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default affected Wolfi kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default-compat affected Chainguard kube-controller-manager-1.30-default-compat —
kube-controller-manager-1.34 affected Chainguard kube-controller-manager-1.34 —
kube-controller-manager-1.34 affected Wolfi kube-controller-manager-1.34 —
kube-controller-manager-1.34-default affected Wolfi kube-controller-manager-1.34-default —
kube-controller-manager-1.34-default affected Chainguard kube-controller-manager-1.34-default —
kube-controller-manager-1.34-default-compat affected Chainguard kube-controller-manager-1.34-default-compat —
kube-controller-manager-1.34-default-compat affected Wolfi kube-controller-manager-1.34-default-compat —
kube-controller-manager-fips-1.30 affected Chainguard kube-controller-manager-fips-1.30 —
kube-controller-manager-fips-1.30-default affected Chainguard kube-controller-manager-fips-1.30-default —
kube-controller-manager-fips-1.30-default-compat affected Chainguard kube-controller-manager-fips-1.30-default-compat —
kube-controller-manager-fips-1.31 affected Chainguard kube-controller-manager-fips-1.31 —
kube-controller-manager-fips-1.32 affected Chainguard kube-controller-manager-fips-1.32 —
kubectl-1.30 affected Wolfi kubectl-1.30 —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Wolfi kubectl-1.30-default —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-1.30-default-compat affected Chainguard kubectl-1.30-default-compat —
kubectl-1.30-iamguarded-compat affected Chainguard kubectl-1.30-iamguarded-compat —
kubectl-1.34-default affected Wolfi kubectl-1.34-default —
kubectl-1.34-default affected Chainguard kubectl-1.34-default —
kubectl-1.34-default-compat affected Chainguard kubectl-1.34-default-compat —
kubectl-1.34-default-compat affected Wolfi kubectl-1.34-default-compat —
kubectl-bash-completion-1.30 affected Wolfi kubectl-bash-completion-1.30 —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubectl-bash-completion-fips-1.30 affected Chainguard kubectl-bash-completion-fips-1.30 —
kubectl-bash-completion-fips-1.34 affected Chainguard kubectl-bash-completion-fips-1.34 —
kubectl-fips-1.30 affected Chainguard kubectl-fips-1.30 —
kubectl-fips-1.30-default affected Chainguard kubectl-fips-1.30-default —
kubectl-fips-1.30-default-compat affected Chainguard kubectl-fips-1.30-default-compat —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30 affected Wolfi kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kubelet-1.30-default affected Wolfi kubelet-1.30-default —
kubelet-1.30-default-compat affected Chainguard kubelet-1.30-default-compat —
kubelet-1.34 affected Chainguard kubelet-1.34 —
kubelet-1.34 affected Wolfi kubelet-1.34 —
kubelet-1.34-default-compat affected Chainguard kubelet-1.34-default-compat —
kubelet-1.34-default-compat affected Wolfi kubelet-1.34-default-compat —
kubelet-fips-1.30 affected Chainguard kubelet-fips-1.30 —
kubelet-fips-1.30-default affected Chainguard kubelet-fips-1.30-default —
kubelet-fips-1.30-default-compat affected Chainguard kubelet-fips-1.30-default-compat —
kubelet-fips-1.31 affected Chainguard kubelet-fips-1.31 —
kubelet-fips-1.32 affected Chainguard kubelet-fips-1.32 —
kubelet-fips-1.34 affected Chainguard kubelet-fips-1.34 —
kubelet-fips-1.34-default-compat affected Chainguard kubelet-fips-1.34-default-compat —
kube-proxy-1.30 affected Wolfi kube-proxy-1.30 —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30-default affected Wolfi kube-proxy-1.30-default —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kube-proxy-1.32 affected Wolfi kube-proxy-1.32 —
kube-proxy-1.32 affected Chainguard kube-proxy-1.32 —
kube-proxy-1.34 affected Wolfi kube-proxy-1.34 —
kube-proxy-1.34 affected Chainguard kube-proxy-1.34 —
kube-proxy-1.34-default affected Chainguard kube-proxy-1.34-default —
kube-proxy-1.34-default affected Wolfi kube-proxy-1.34-default —
kube-proxy-1.34-default-compat affected Wolfi kube-proxy-1.34-default-compat —
kube-proxy-1.34-default-compat affected Chainguard kube-proxy-1.34-default-compat —
kube-proxy-fips-1.30 affected Chainguard kube-proxy-fips-1.30 —
kube-proxy-fips-1.30-default affected Chainguard kube-proxy-fips-1.30-default —
kube-proxy-fips-1.30-default-compat affected Chainguard kube-proxy-fips-1.30-default-compat —
kube-proxy-fips-1.31 affected Chainguard kube-proxy-fips-1.31 —
kube-proxy-fips-1.34-default affected Chainguard kube-proxy-fips-1.34-default —
kubernetes-1.30 affected Wolfi kubernetes-1.30 —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Wolfi kubernetes-1.30-default —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-1.34 affected Chainguard kubernetes-1.34 —
kubernetes-1.34 affected Wolfi kubernetes-1.34 —
kubernetes-csi-driver-nfs affected Wolfi kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs affected Chainguard kubernetes-csi-driver-nfs —
kubernetes-csi-driver-nfs-compat affected Wolfi kubernetes-csi-driver-nfs-compat —
kubernetes-csi-driver-nfs-compat affected Chainguard kubernetes-csi-driver-nfs-compat —
kubernetes-csi-driver-nfs-fips affected Chainguard kubernetes-csi-driver-nfs-fips —
kubernetes-fips-1.30 affected Chainguard kubernetes-fips-1.30 —
kubernetes-fips-1.30-default affected Chainguard kubernetes-fips-1.30-default —
kubernetes-fips-1.31 affected Chainguard kubernetes-fips-1.31 —
kubernetes-fips-1.32 affected Chainguard kubernetes-fips-1.32 —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-1.34 affected Wolfi kubernetes-pause-1.34 —
kubernetes-pause-1.34 affected Chainguard kubernetes-pause-1.34 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kubescape affected Wolfi kubescape —
kubescape affected Chainguard kubescape —
kubescape-operator affected Wolfi kubescape-operator —
kubescape-operator affected Chainguard kubescape-operator —
kubescape-operator-fips affected Chainguard kubescape-operator-fips —
kube-scheduler-1.30 affected Wolfi kube-scheduler-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
kube-scheduler-1.30-default affected Wolfi kube-scheduler-1.30-default —
kube-scheduler-1.30-default-compat affected Chainguard kube-scheduler-1.30-default-compat —
kube-scheduler-1.34-default affected Wolfi kube-scheduler-1.34-default —
kube-scheduler-1.34-default affected Chainguard kube-scheduler-1.34-default —
kube-scheduler-1.34-default-compat affected Wolfi kube-scheduler-1.34-default-compat —
kube-scheduler-1.34-default-compat affected Chainguard kube-scheduler-1.34-default-compat —
kube-scheduler-fips-1.30 affected Chainguard kube-scheduler-fips-1.30 —
kube-scheduler-fips-1.30-default affected Chainguard kube-scheduler-fips-1.30-default —
kube-scheduler-fips-1.30-default-compat affected Chainguard kube-scheduler-fips-1.30-default-compat —
kube-scheduler-fips-1.31 affected Chainguard kube-scheduler-fips-1.31 —
longhorn-share-manager-1.10 affected Chainguard longhorn-share-manager-1.10 —
longhorn-share-manager-1.10-compat affected Chainguard longhorn-share-manager-1.10-compat —
longhorn-share-manager-1.8 affected Chainguard longhorn-share-manager-1.8 —
longhorn-share-manager-1.8-compat affected Chainguard longhorn-share-manager-1.8-compat —
longhorn-share-manager-1.9 affected Chainguard longhorn-share-manager-1.9 —
longhorn-share-manager-1.9-compat affected Chainguard longhorn-share-manager-1.9-compat —
longhorn-share-manager-fips-1.10 affected Chainguard longhorn-share-manager-fips-1.10 —
longhorn-share-manager-fips-1.8 affected Chainguard longhorn-share-manager-fips-1.8 —
longhorn-share-manager-fips-1.8-compat affected Chainguard longhorn-share-manager-fips-1.8-compat —
longhorn-share-manager-fips-1.9 affected Chainguard longhorn-share-manager-fips-1.9 —
longhorn-share-manager-fips-1.9-compat affected Chainguard longhorn-share-manager-fips-1.9-compat —
mesosphere-vsphere-csi affected Wolfi mesosphere-vsphere-csi —
mesosphere-vsphere-csi affected Chainguard mesosphere-vsphere-csi —
mesosphere-vsphere-csi-driver affected Wolfi mesosphere-vsphere-csi-driver —
mesosphere-vsphere-csi-driver affected Chainguard mesosphere-vsphere-csi-driver —
mesosphere-vsphere-csi-syncer affected Wolfi mesosphere-vsphere-csi-syncer —
mesosphere-vsphere-csi-syncer affected Chainguard mesosphere-vsphere-csi-syncer —
mps-control-daemon affected Chainguard mps-control-daemon —
mps-control-daemon affected Wolfi mps-control-daemon —
mps-control-daemon-fips affected Chainguard mps-control-daemon-fips —
nerdctl affected Chainguard nerdctl —
nerdctl affected Wolfi nerdctl —
nerdctl-fips affected Chainguard nerdctl-fips —
neuvector affected Wolfi neuvector —
neuvector affected Chainguard neuvector —
neuvector-cis-benchmarks affected Chainguard neuvector-cis-benchmarks —
neuvector-cis-benchmarks affected Wolfi neuvector-cis-benchmarks —
neuvector-controller affected Wolfi neuvector-controller —
neuvector-controller affected Chainguard neuvector-controller —
neuvector-controller-fips affected Chainguard neuvector-controller-fips —
neuvector-enforcer affected Chainguard neuvector-enforcer —
neuvector-enforcer affected Wolfi neuvector-enforcer —
neuvector-enforcer-fips affected Chainguard neuvector-enforcer-fips —
neuvector-fips affected Chainguard neuvector-fips —
neuvector-monitor affected Wolfi neuvector-monitor —
neuvector-monitor affected Chainguard neuvector-monitor —
neuvector-nstools affected Chainguard neuvector-nstools —
neuvector-nstools affected Wolfi neuvector-nstools —
neuvector-scanner affected Wolfi neuvector-scanner —
neuvector-scanner affected Chainguard neuvector-scanner —
neuvector-scanner-fips affected Chainguard neuvector-scanner-fips —
neuvector-scanner-monitor affected Chainguard neuvector-scanner-monitor —
neuvector-scanner-monitor affected Wolfi neuvector-scanner-monitor —
neuvector-scanner-monitor-fips affected Chainguard neuvector-scanner-monitor-fips —
neuvector-scanner-task affected Chainguard neuvector-scanner-task —
neuvector-scanner-task affected Wolfi neuvector-scanner-task —
neuvector-scanner-task-fips affected Chainguard neuvector-scanner-task-fips —
neuvector-upgrader affected Chainguard neuvector-upgrader —
neuvector-upgrader-fips affected Chainguard neuvector-upgrader-fips —
newrelic-infrastructure-agent affected Wolfi newrelic-infrastructure-agent —
newrelic-infrastructure-agent affected Chainguard newrelic-infrastructure-agent —
newrelic-infrastructure-agent-fips affected Chainguard newrelic-infrastructure-agent-fips —
node-feature-discovery-0.17 affected Wolfi node-feature-discovery-0.17 —
node-feature-discovery-0.17 affected Chainguard node-feature-discovery-0.17 —
node-feature-discovery-0.18 affected Wolfi node-feature-discovery-0.18 —
node-feature-discovery-0.18 affected Chainguard node-feature-discovery-0.18 —
node-feature-discovery-fips-0.16 affected Chainguard node-feature-discovery-fips-0.16 —
node-feature-discovery-fips-0.16-gc affected Chainguard node-feature-discovery-fips-0.16-gc —
node-feature-discovery-fips-0.16-kubectl-nfd affected Chainguard node-feature-discovery-fips-0.16-kubectl-nfd —
node-feature-discovery-fips-0.16-master affected Chainguard node-feature-discovery-fips-0.16-master —
node-feature-discovery-fips-0.16-topology-updater affected Chainguard node-feature-discovery-fips-0.16-topology-updater —
node-feature-discovery-fips-0.16-worker affected Chainguard node-feature-discovery-fips-0.16-worker —
nvidia-container-toolkit-nvidia-cdi-hook affected Chainguard nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-cdi-hook affected Wolfi nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-ctk affected Wolfi nvidia-container-toolkit-nvidia-ctk —
nvidia-container-toolkit-nvidia-ctk affected Chainguard nvidia-container-toolkit-nvidia-ctk —
nvidia-device-plugin affected Wolfi nvidia-device-plugin —
nvidia-device-plugin affected Chainguard nvidia-device-plugin —
nvidia-device-plugin-fips affected Chainguard nvidia-device-plugin-fips —
osv-scanner affected Chainguard osv-scanner —
osv-scanner affected Wolfi osv-scanner —
podman affected Wolfi podman —
podman affected Chainguard podman —
podman-doc affected Wolfi podman-doc —
podman-doc affected Chainguard podman-doc —
prometheus-node-exporter affected Wolfi prometheus-node-exporter —
prometheus-node-exporter affected Chainguard prometheus-node-exporter —
prometheus-node-exporter-1.4 affected Chainguard prometheus-node-exporter-1.4 —
prometheus-node-exporter-1.5 affected Chainguard prometheus-node-exporter-1.5 —
prometheus-node-exporter-1.5-compat affected Chainguard prometheus-node-exporter-1.5-compat —
prometheus-node-exporter-compat affected Chainguard prometheus-node-exporter-compat —
prometheus-node-exporter-compat affected Wolfi prometheus-node-exporter-compat —
prometheus-node-exporter-fips affected Chainguard prometheus-node-exporter-fips —
prometheus-node-exporter-fips-iamguarded-compat affected Chainguard prometheus-node-exporter-fips-iamguarded-compat —
prometheus-podman-exporter affected Chainguard prometheus-podman-exporter —
prometheus-podman-exporter affected Wolfi prometheus-podman-exporter —
prometheus-podman-exporter-compat affected Chainguard prometheus-podman-exporter-compat —
prometheus-podman-exporter-compat affected Wolfi prometheus-podman-exporter-compat —
prometheus-podman-exporter-fips affected Chainguard prometheus-podman-exporter-fips —
rancher-2.10 affected Wolfi rancher-2.10 —
rancher-2.10 affected Chainguard rancher-2.10 —
rancher-agent-2.11 affected Wolfi rancher-agent-2.11 —
rancher-agent-2.11 affected Chainguard rancher-agent-2.11 —
rancher-agent-2.9 affected Chainguard rancher-agent-2.9 —
rancher-agent-2.9 affected Wolfi rancher-agent-2.9 —
rke2-runtime-1.31 affected Chainguard rke2-runtime-1.31 —
rke2-runtime-1.31-charts affected Chainguard rke2-runtime-1.31-charts —
rke2-runtime-1.32 affected Chainguard rke2-runtime-1.32 —
rke2-runtime-1.32-charts affected Chainguard rke2-runtime-1.32-charts —
rke2-runtime-1.33 affected Chainguard rke2-runtime-1.33 —
rke2-runtime-1.33-charts affected Chainguard rke2-runtime-1.33-charts —
rke2-runtime-1.33-compat affected Chainguard rke2-runtime-1.33-compat —
rke2-runtime-fips-kube-apiserver-1.33 affected Chainguard rke2-runtime-fips-kube-apiserver-1.33 —
rke2-runtime-fips-kube-controller-manager-1.33 affected Chainguard rke2-runtime-fips-kube-controller-manager-1.33 —
rke2-runtime-fips-kubelet-1.33 affected Chainguard rke2-runtime-fips-kubelet-1.33 —
skaffold affected Wolfi skaffold —
skaffold affected Chainguard skaffold —
skaffold-fips affected Chainguard skaffold-fips —
spegel affected Wolfi spegel —
spegel affected Chainguard spegel —
spegel-compat affected Wolfi spegel-compat —
spegel-compat affected Chainguard spegel-compat —
spegel-fips affected Chainguard spegel-fips —
spegel-fips-compat affected Chainguard spegel-fips-compat —
sriov-network-device-plugin affected Wolfi sriov-network-device-plugin —
sriov-network-device-plugin affected Chainguard sriov-network-device-plugin —
sriov-network-device-plugin-entrypoint affected Chainguard sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-entrypoint affected Wolfi sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-fips affected Chainguard sriov-network-device-plugin-fips —
syft affected Chainguard syft —
syft affected Wolfi syft —
syft-fips affected Chainguard syft-fips —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
trivy-fips affected Chainguard trivy-fips —
trivy-operator affected Chainguard trivy-operator —
trivy-operator affected Wolfi trivy-operator —
trivy-operator-fips affected Chainguard trivy-operator-fips —
vc-controller-manager affected Chainguard vc-controller-manager —
vc-controller-manager-fips affected Chainguard vc-controller-manager-fips —
vc-scheduler affected Chainguard vc-scheduler —
vc-scheduler-fips affected Chainguard vc-scheduler-fips —
vc-webhook-manager affected Chainguard vc-webhook-manager —
vc-webhook-manager-fips affected Chainguard vc-webhook-manager-fips —
virt-api-1.8 affected Chainguard virt-api-1.8 —
virt-api-fips-1.8 affected Chainguard virt-api-fips-1.8 —
virt-chroot-1.6 affected Chainguard virt-chroot-1.6 —
virt-chroot-1.7 affected Chainguard virt-chroot-1.7 —
virt-chroot-fips-1.6 affected Chainguard virt-chroot-fips-1.6 —
virt-chroot-fips-1.7 affected Chainguard virt-chroot-fips-1.7 —
virt-controller-1.8 affected Chainguard virt-controller-1.8 —
virt-controller-fips-1.8 affected Chainguard virt-controller-fips-1.8 —
virt-handler-1.6 affected Chainguard virt-handler-1.6 —
virt-handler-1.7 affected Chainguard virt-handler-1.7 —
virt-handler-fips-1.6 affected Chainguard virt-handler-fips-1.6 —
virt-handler-fips-1.7 affected Chainguard virt-handler-fips-1.7 —
virt-operator-1.8 affected Chainguard virt-operator-1.8 —
virt-operator-fips-1.8 affected Chainguard virt-operator-fips-1.8 —
volcano affected Chainguard volcano —
volcano-fips affected Chainguard volcano-fips —
wolfictl affected Wolfi wolfictl —
wolfictl affected Chainguard wolfictl —
xeol affected Wolfi xeol —
xeol affected Chainguard xeol —
xeol-compat affected Chainguard xeol-compat —
xeol-compat affected Wolfi xeol-compat —
xeol-fips affected Chainguard xeol-fips —
zarf affected Chainguard zarf —
zarf affected Wolfi zarf —
zot affected Wolfi zot —
zot affected Chainguard zot —
Upstream advisory

CGA-7fr5-r9wv-f462

Open SourceCoalition ESS > 63%2026-01-10

CGA-7fr5-r9wv-f462

Affected products

ProductStatusVendorPackageEcosystem
azure-vnet-cni affected Chainguard azure-vnet-cni —
buildah affected Wolfi buildah —
buildah affected Chainguard buildah —
cluster-autoscaler-1.31 affected Wolfi cluster-autoscaler-1.31 —
cluster-autoscaler-1.31 affected Chainguard cluster-autoscaler-1.31 —
cluster-autoscaler-fips-1.31 affected Chainguard cluster-autoscaler-fips-1.31 —
eks-distro-1.29 affected Chainguard eks-distro-1.29 —
eks-distro-1.30 affected Chainguard eks-distro-1.30 —
eks-distro-1.31 affected Chainguard eks-distro-1.31 —
eks-distro-1.32 affected Chainguard eks-distro-1.32 —
eks-distro-coredns-1.30 affected Chainguard eks-distro-coredns-1.30 —
eks-distro-coredns-1.31 affected Chainguard eks-distro-coredns-1.31 —
eks-distro-coredns-1.32 affected Chainguard eks-distro-coredns-1.32 —
eks-distro-coredns-fips-1.29 affected Chainguard eks-distro-coredns-fips-1.29 —
eks-distro-coredns-fips-1.30 affected Chainguard eks-distro-coredns-fips-1.30 —
eks-distro-fips-1.29 affected Chainguard eks-distro-fips-1.29 —
eks-distro-fips-1.30 affected Chainguard eks-distro-fips-1.30 —
eks-distro-kube-apiserver-1.30 affected Chainguard eks-distro-kube-apiserver-1.30 —
eks-distro-kube-apiserver-1.31 affected Chainguard eks-distro-kube-apiserver-1.31 —
eks-distro-kube-apiserver-1.32 affected Chainguard eks-distro-kube-apiserver-1.32 —
eks-distro-kube-apiserver-fips-1.29 affected Chainguard eks-distro-kube-apiserver-fips-1.29 —
eks-distro-kube-apiserver-fips-1.30 affected Chainguard eks-distro-kube-apiserver-fips-1.30 —
eks-distro-kube-controller-manager-1.30 affected Chainguard eks-distro-kube-controller-manager-1.30 —
eks-distro-kube-controller-manager-1.31 affected Chainguard eks-distro-kube-controller-manager-1.31 —
eks-distro-kube-controller-manager-1.32 affected Chainguard eks-distro-kube-controller-manager-1.32 —
eks-distro-kube-controller-manager-fips-1.29 affected Chainguard eks-distro-kube-controller-manager-fips-1.29 —
eks-distro-kube-controller-manager-fips-1.30 affected Chainguard eks-distro-kube-controller-manager-fips-1.30 —
eks-distro-kube-controller-manager-fips-1.32 affected Chainguard eks-distro-kube-controller-manager-fips-1.32 —
eks-distro-kube-proxy-1.30 affected Chainguard eks-distro-kube-proxy-1.30 —
eks-distro-kube-proxy-1.31 affected Chainguard eks-distro-kube-proxy-1.31 —
eks-distro-kube-proxy-fips-1.29 affected Chainguard eks-distro-kube-proxy-fips-1.29 —
eks-distro-kube-proxy-fips-1.30 affected Chainguard eks-distro-kube-proxy-fips-1.30 —
eks-distro-kube-proxy-fips-1.32 affected Chainguard eks-distro-kube-proxy-fips-1.32 —
eks-distro-kubernetes-csi-external-attacher-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.30 —
eks-distro-kubernetes-csi-external-attacher-1.31 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.31 —
eks-distro-kubernetes-csi-external-attacher-1.32 affected Chainguard eks-distro-kubernetes-csi-external-attacher-1.32 —
eks-distro-kubernetes-csi-external-attacher-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.29 —
eks-distro-kubernetes-csi-external-attacher-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-attacher-fips-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.30 —
eks-distro-kubernetes-csi-external-provisioner-1.31 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.31 —
eks-distro-kubernetes-csi-external-provisioner-1.32 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-1.32 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.29 —
eks-distro-kubernetes-csi-external-provisioner-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-fips-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.30 —
eks-distro-kubernetes-csi-external-resizer-1.31 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.31 —
eks-distro-kubernetes-csi-external-resizer-1.32 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.32 —
eks-distro-kubernetes-csi-external-resizer-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.29 —
eks-distro-kubernetes-csi-external-resizer-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-resizer-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.30 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.31 —
eks-distro-kubernetes-csi-external-snapshot-controller-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-1.32 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.30 —
eks-distro-kubernetes-csi-external-snapshotter-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.31 —
eks-distro-kubernetes-csi-external-snapshotter-1.32 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-1.32 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-fips-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.30 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-1.31 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.29 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-fips-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.30 —
eks-distro-kubernetes-csi-livenessprobe-1.31 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.31 —
eks-distro-kubernetes-csi-livenessprobe-1.32 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-1.32 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.29 —
eks-distro-kubernetes-csi-livenessprobe-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-fips-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.30 —
eks-distro-kubernetes-csi-node-driver-registrar-1.31 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.31 —
eks-distro-kubernetes-csi-node-driver-registrar-1.32 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-1.32 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.29 —
eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-fips-1.30 —
eks-distro-kubernetes-pause-1.30 affected Chainguard eks-distro-kubernetes-pause-1.30 —
eks-distro-kubernetes-pause-1.31 affected Chainguard eks-distro-kubernetes-pause-1.31 —
eks-distro-kubernetes-pause-compat-1.30 affected Chainguard eks-distro-kubernetes-pause-compat-1.30 —
eks-distro-kubernetes-pause-compat-1.31 affected Chainguard eks-distro-kubernetes-pause-compat-1.31 —
eks-distro-kube-scheduler-1.30 affected Chainguard eks-distro-kube-scheduler-1.30 —
eks-distro-kube-scheduler-1.31 affected Chainguard eks-distro-kube-scheduler-1.31 —
eks-distro-kube-scheduler-1.32 affected Chainguard eks-distro-kube-scheduler-1.32 —
eks-distro-kube-scheduler-fips-1.29 affected Chainguard eks-distro-kube-scheduler-fips-1.29 —
eks-distro-kube-scheduler-fips-1.30 affected Chainguard eks-distro-kube-scheduler-fips-1.30 —
falco-no-driver affected Wolfi falco-no-driver —
falco-no-driver affected Chainguard falco-no-driver —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
k3s-1.32 affected Wolfi k3s-1.32 —
k3s-1.32 affected Chainguard k3s-1.32 —
k3s-1.33 affected Chainguard k3s-1.33 —
k3s-1.33 affected Wolfi k3s-1.33 —
k3s-multicall-1.32 affected Wolfi k3s-multicall-1.32 —
k3s-multicall-1.32 affected Chainguard k3s-multicall-1.32 —
k3s-multicall-1.33 affected Chainguard k3s-multicall-1.33 —
k3s-multicall-1.33 affected Wolfi k3s-multicall-1.33 —
k3s-static-1.32 affected Chainguard k3s-static-1.32 —
k3s-static-1.32 affected Wolfi k3s-static-1.32 —
k3s-static-1.33 affected Chainguard k3s-static-1.33 —
k3s-static-1.33 affected Wolfi k3s-static-1.33 —
kubeadm-1.30 affected Wolfi kubeadm-1.30 —
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kubeadm-1.30-default affected Wolfi kubeadm-1.30-default —
kubeadm-1.30-default-compat affected Chainguard kubeadm-1.30-default-compat —
kube-apiserver-1.30 affected Wolfi kube-apiserver-1.30 —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-apiserver-1.30-default affected Wolfi kube-apiserver-1.30-default —
kube-apiserver-1.30-default-compat affected Chainguard kube-apiserver-1.30-default-compat —
kube-controller-manager-1.30 affected Wolfi kube-controller-manager-1.30 —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default affected Wolfi kube-controller-manager-1.30-default —
kube-controller-manager-1.30-default-compat affected Chainguard kube-controller-manager-1.30-default-compat —
kubectl-1.30 affected Wolfi kubectl-1.30 —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Wolfi kubectl-1.30-default —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-1.30-default-compat affected Chainguard kubectl-1.30-default-compat —
kubectl-1.30-iamguarded-compat affected Chainguard kubectl-1.30-iamguarded-compat —
kubectl-bash-completion-1.30 affected Wolfi kubectl-bash-completion-1.30 —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30 affected Wolfi kubelet-1.30 —
kubelet-1.30-default affected Wolfi kubelet-1.30-default —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kubelet-1.30-default-compat affected Chainguard kubelet-1.30-default-compat —
kubelet-fips-1.32 affected Chainguard kubelet-fips-1.32 —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30 affected Wolfi kube-proxy-1.30 —
kube-proxy-1.30-default affected Wolfi kube-proxy-1.30-default —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kube-proxy-1.32 affected Wolfi kube-proxy-1.32 —
kube-proxy-1.32 affected Chainguard kube-proxy-1.32 —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30 affected Wolfi kubernetes-1.30 —
kubernetes-1.30-default affected Wolfi kubernetes-1.30-default —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-1.32 affected Wolfi kubernetes-1.32 —
kubernetes-1.32 affected Chainguard kubernetes-1.32 —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kube-scheduler-1.30 affected Wolfi kube-scheduler-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Wolfi kube-scheduler-1.30-default —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
kube-scheduler-1.30-default-compat affected Chainguard kube-scheduler-1.30-default-compat —
node-feature-discovery-0.17 affected Wolfi node-feature-discovery-0.17 —
node-feature-discovery-0.17 affected Chainguard node-feature-discovery-0.17 —
node-feature-discovery-0.18 affected Chainguard node-feature-discovery-0.18 —
node-feature-discovery-0.18 affected Wolfi node-feature-discovery-0.18 —
node-feature-discovery-fips-0.16 affected Chainguard node-feature-discovery-fips-0.16 —
node-feature-discovery-fips-0.16-gc affected Chainguard node-feature-discovery-fips-0.16-gc —
node-feature-discovery-fips-0.16-kubectl-nfd affected Chainguard node-feature-discovery-fips-0.16-kubectl-nfd —
node-feature-discovery-fips-0.16-master affected Chainguard node-feature-discovery-fips-0.16-master —
node-feature-discovery-fips-0.16-topology-updater affected Chainguard node-feature-discovery-fips-0.16-topology-updater —
node-feature-discovery-fips-0.16-worker affected Chainguard node-feature-discovery-fips-0.16-worker —
nvidia-container-toolkit-nvidia-cdi-hook affected Chainguard nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-cdi-hook affected Wolfi nvidia-container-toolkit-nvidia-cdi-hook —
nvidia-container-toolkit-nvidia-ctk affected Wolfi nvidia-container-toolkit-nvidia-ctk —
nvidia-container-toolkit-nvidia-ctk affected Chainguard nvidia-container-toolkit-nvidia-ctk —
podman affected Chainguard podman —
podman affected Wolfi podman —
podman-doc affected Wolfi podman-doc —
podman-doc affected Chainguard podman-doc —
prometheus-podman-exporter affected Wolfi prometheus-podman-exporter —
prometheus-podman-exporter affected Chainguard prometheus-podman-exporter —
prometheus-podman-exporter-compat affected Chainguard prometheus-podman-exporter-compat —
prometheus-podman-exporter-compat affected Wolfi prometheus-podman-exporter-compat —
rancher-2.10 affected Chainguard rancher-2.10 —
rancher-2.10 affected Wolfi rancher-2.10 —
rancher-agent-2.11 affected Wolfi rancher-agent-2.11 —
rancher-agent-2.11 affected Chainguard rancher-agent-2.11 —
rancher-agent-2.9 affected Wolfi rancher-agent-2.9 —
rancher-agent-2.9 affected Chainguard rancher-agent-2.9 —
rke2-runtime-1.31 affected Chainguard rke2-runtime-1.31 —
rke2-runtime-1.31-charts affected Chainguard rke2-runtime-1.31-charts —
sriov-network-device-plugin affected Chainguard sriov-network-device-plugin —
sriov-network-device-plugin affected Wolfi sriov-network-device-plugin —
sriov-network-device-plugin-entrypoint affected Chainguard sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-entrypoint affected Wolfi sriov-network-device-plugin-entrypoint —
sriov-network-device-plugin-fips affected Chainguard sriov-network-device-plugin-fips —
virt-api-1.8 affected Chainguard virt-api-1.8 —
virt-api-fips-1.8 affected Chainguard virt-api-fips-1.8 —
virt-chroot-1.6 affected Chainguard virt-chroot-1.6 —
virt-chroot-1.7 affected Chainguard virt-chroot-1.7 —
virt-chroot-fips-1.6 affected Chainguard virt-chroot-fips-1.6 —
virt-chroot-fips-1.7 affected Chainguard virt-chroot-fips-1.7 —
virt-controller-1.8 affected Chainguard virt-controller-1.8 —
virt-controller-fips-1.8 affected Chainguard virt-controller-fips-1.8 —
virt-handler-1.6 affected Chainguard virt-handler-1.6 —
virt-handler-1.7 affected Chainguard virt-handler-1.7 —
virt-handler-fips-1.6 affected Chainguard virt-handler-fips-1.6 —
virt-handler-fips-1.7 affected Chainguard virt-handler-fips-1.7 —
virt-operator-1.8 affected Chainguard virt-operator-1.8 —
virt-operator-fips-1.8 affected Chainguard virt-operator-fips-1.8 —
Upstream advisory

CGA-w435-rhgq-www3

Open SourceCoalition ESS > 63%2026-01-29

CGA-w435-rhgq-www3

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Wolfi chromium-qt —
chromium-qt affected Chainguard chromium-qt —
Upstream advisory

CGA-wcv9-85xc-5pf6

Open SourceCoalition ESS > 63%2026-01-28

CGA-wcv9-85xc-5pf6

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-vw3q-9hpx-g8xj

Open SourceCoalition ESS > 63%2026-01-29

CGA-vw3q-9hpx-g8xj

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-vcxw-2hjc-cghf

Open SourceCoalition ESS > 63%2026-01-28

CGA-vcxw-2hjc-cghf

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Chainguard chromium —
chromium affected Wolfi chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-wqj2-qhfx-7xvw

Open SourcePoC exploit2026-01-28

CGA-wqj2-qhfx-7xvw

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.9-compat —
Upstream advisory

CGA-w4fr-mqq5-fgvq

Open SourcePoC exploit2026-01-28

CGA-w4fr-mqq5-fgvq

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-fips affected Chainguard kubernetes-csi-livenessprobe-fips —
Upstream advisory

CGA-xmxp-gm7h-hpgr

Open SourcePoC exploit2026-01-28

CGA-xmxp-gm7h-hpgr

Affected products

ProductStatusVendorPackageEcosystem
wavefront-collector-for-kubernetes-1.12 affected Chainguard wavefront-collector-for-kubernetes-1.12 —
Upstream advisory

CGA-xhf2-4cvp-gjp4

Open SourcePoC exploit2026-01-28

CGA-xhf2-4cvp-gjp4

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-resizer-1.10 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.10 —
Upstream advisory

CGA-x7p6-3hw6-qx43

Open SourcePoC exploit2026-01-28

CGA-x7p6-3hw6-qx43

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-livenessprobe-2.11 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-2.11 —
Upstream advisory

CGA-x7cm-4pm6-7xr4

Open SourcePoC exploit2026-01-28

CGA-x7cm-4pm6-7xr4

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
Upstream advisory

CGA-wqf3-9vcm-68r9

Open SourcePoC exploit2026-01-28

CGA-wqf3-9vcm-68r9

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Wolfi kubeadm-1.29 —
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Wolfi kubeadm-1.29-default —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29 affected Wolfi kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-apiserver-1.29-default affected Wolfi kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29 affected Wolfi kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kube-controller-manager-1.29-default affected Wolfi kube-controller-manager-1.29-default —
kubectl-1.29 affected Wolfi kubectl-1.29 —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-default affected Wolfi kubectl-1.29-default —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubectl-bash-completion-1.29 affected Wolfi kubectl-bash-completion-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29 affected Wolfi kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kubelet-1.29-default affected Wolfi kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29 affected Wolfi kube-proxy-1.29 —
kube-proxy-1.29-default affected Wolfi kube-proxy-1.29-default —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-1.29-default affected Wolfi kubernetes-1.29-default —
kube-scheduler-1.29 affected Wolfi kube-scheduler-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Wolfi kube-scheduler-1.29-default —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
Upstream advisory

CGA-wcgf-p72v-c586

Open SourcePoC exploit2026-01-28

CGA-wcgf-p72v-c586

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.28 affected Chainguard kubeadm-fips-1.28 —
kubeadm-fips-1.28-default affected Chainguard kubeadm-fips-1.28-default —
kube-apiserver-fips-1.28 affected Chainguard kube-apiserver-fips-1.28 —
kube-apiserver-fips-1.28-default affected Chainguard kube-apiserver-fips-1.28-default —
kube-controller-manager-fips-1.28 affected Chainguard kube-controller-manager-fips-1.28 —
kube-controller-manager-fips-1.28-default affected Chainguard kube-controller-manager-fips-1.28-default —
kubectl-bash-completion-fips-1.28 affected Chainguard kubectl-bash-completion-fips-1.28 —
kubectl-fips-1.28 affected Chainguard kubectl-fips-1.28 —
kubectl-fips-1.28-default affected Chainguard kubectl-fips-1.28-default —
kubelet-fips-1.28 affected Chainguard kubelet-fips-1.28 —
kubelet-fips-1.28-default affected Chainguard kubelet-fips-1.28-default —
kube-proxy-fips-1.28 affected Chainguard kube-proxy-fips-1.28 —
kube-proxy-fips-1.28-default affected Chainguard kube-proxy-fips-1.28-default —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.28-default affected Chainguard kubernetes-fips-1.28-default —
kube-scheduler-fips-1.28 affected Chainguard kube-scheduler-fips-1.28 —
kube-scheduler-fips-1.28-default affected Chainguard kube-scheduler-fips-1.28-default —
Upstream advisory

CGA-rx9g-24f5-6438

Open SourcePoC exploit2026-01-28

CGA-rx9g-24f5-6438

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-snapshotter-6.0 affected Chainguard kubernetes-csi-external-snapshotter-6.0 —
Upstream advisory

CGA-vh9q-48x5-fc69

Open SourcePoC exploit2026-01-28

CGA-vh9q-48x5-fc69

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe affected Chainguard kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe affected Wolfi kubernetes-csi-livenessprobe —
Upstream advisory

CGA-v973-qcwf-6576

Open SourcePoC exploit2026-01-28

CGA-v973-qcwf-6576

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.10 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.10 —
kubernetes-csi-node-driver-registrar-fips-2.10-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.10-compat —
Upstream advisory

CGA-v7g4-56wg-j7mh

Open SourcePoC exploit2026-01-28

CGA-v7g4-56wg-j7mh

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
Upstream advisory

CGA-v3qw-6vjp-88h4

Open SourcePoC exploit2026-01-28

CGA-v3qw-6vjp-88h4

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.10 affected Chainguard kubernetes-csi-node-driver-registrar-2.10 —
kubernetes-csi-node-driver-registrar-2.10 affected Wolfi kubernetes-csi-node-driver-registrar-2.10 —
kubernetes-csi-node-driver-registrar-2.10-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.10-compat —
kubernetes-csi-node-driver-registrar-2.10-compat affected Wolfi kubernetes-csi-node-driver-registrar-2.10-compat —
Upstream advisory

CGA-rrqh-fpcm-4xhf

Open SourcePoC exploit2026-01-28

CGA-rrqh-fpcm-4xhf

Affected products

ProductStatusVendorPackageEcosystem
k8ssandra-operator affected Chainguard k8ssandra-operator —
k8ssandra-operator affected Wolfi k8ssandra-operator —
k8ssandra-operator-compat affected Chainguard k8ssandra-operator-compat —
k8ssandra-operator-compat affected Wolfi k8ssandra-operator-compat —
Upstream advisory

CGA-rpv7-6mq2-27cg

Open SourcePoC exploit2026-01-28

CGA-rpv7-6mq2-27cg

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s affected Chainguard vault-k8s —
vault-k8s affected Wolfi vault-k8s —
Upstream advisory

CGA-rhw8-gfrg-93j5

Open SourcePoC exploit2026-01-28

CGA-rhw8-gfrg-93j5

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-snapshot-controller-6.3 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-controller-6.3 —
eks-distro-kubernetes-csi-external-snapshotter-6.3 affected Chainguard eks-distro-kubernetes-csi-external-snapshotter-6.3 —
eks-distro-kubernetes-csi-external-snapshot-validation-webhook-6.3 affected Chainguard eks-distro-kubernetes-csi-external-snapshot-validation-webhook-6.3 —
Upstream advisory

CGA-rh83-9w4h-m426

Open SourcePoC exploit2026-01-28

CGA-rh83-9w4h-m426

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
Upstream advisory

CGA-r25p-qhpr-92fg

Open SourcePoC exploit2026-01-28

CGA-r25p-qhpr-92fg

Affected products

ProductStatusVendorPackageEcosystem
golangci-lint affected Wolfi golangci-lint —
golangci-lint affected Chainguard golangci-lint —
Upstream advisory

CGA-qwwg-c385-mv9r

Open SourcePoC exploit2026-01-28

CGA-qwwg-c385-mv9r

Affected products

ProductStatusVendorPackageEcosystem
pulumi-kubernetes-operator affected Wolfi pulumi-kubernetes-operator —
pulumi-kubernetes-operator affected Chainguard pulumi-kubernetes-operator —
Upstream advisory

CGA-qj3p-h38f-4ch9

Open SourcePoC exploit2026-01-28

CGA-qj3p-h38f-4ch9

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
Upstream advisory

CGA-qfpm-8pvf-mrxc

Open SourcePoC exploit2026-01-28

CGA-qfpm-8pvf-mrxc

Affected products

ProductStatusVendorPackageEcosystem
volume-modifier-for-k8s-fips affected Chainguard volume-modifier-for-k8s-fips —
Upstream advisory

CGA-qcp7-cxww-jcpm

Open SourcePoC exploit2026-01-28

CGA-qcp7-cxww-jcpm

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dashboard-fips affected Chainguard kubernetes-dashboard-fips —
Upstream advisory

CGA-q5x8-8pgc-r8g5

Open SourcePoC exploit2026-01-28

CGA-q5x8-8pgc-r8g5

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.8 affected Chainguard kubernetes-csi-node-driver-registrar-2.8 —
kubernetes-csi-node-driver-registrar-2.8-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.8-compat —
Upstream advisory

CGA-q393-3cjp-vhf6

Open SourcePoC exploit2026-01-28

CGA-q393-3cjp-vhf6

Affected products

ProductStatusVendorPackageEcosystem
wavefront-collector-for-kubernetes-1.13 affected Chainguard wavefront-collector-for-kubernetes-1.13 —
Upstream advisory

CGA-qxqg-mmcp-2vqx

Open SourcePoC exploit2026-01-28

CGA-qxqg-mmcp-2vqx

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.9 —
kubernetes-csi-node-driver-registrar-fips-2.9-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.9-compat —
Upstream advisory

CGA-pcf7-493j-x945

Open SourcePoC exploit2026-01-28

CGA-pcf7-493j-x945

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.7 affected Chainguard kubernetes-csi-node-driver-registrar-2.7 —
kubernetes-csi-node-driver-registrar-2.7-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.7-compat —
Upstream advisory

CGA-p4vr-2hfq-mqhx

Open SourcePoC exploit2026-01-28

CGA-p4vr-2hfq-mqhx

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-m8qc-mrvc-p4gm

Open SourcePoC exploit2026-01-28

CGA-m8qc-mrvc-p4gm

Affected products

ProductStatusVendorPackageEcosystem
hello-world-golang affected Chainguard hello-world-golang —
hello-world-golang affected Wolfi hello-world-golang —
Upstream advisory

CGA-m7pq-6hj6-2r9f

Open SourcePoC exploit2026-01-28

CGA-m7pq-6hj6-2r9f

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
Upstream advisory

CGA-m6hp-m4m9-gpf9

Open SourcePoC exploit2026-01-28

CGA-m6hp-m4m9-gpf9

Affected products

ProductStatusVendorPackageEcosystem
nri-kubernetes-2.13 affected Chainguard nri-kubernetes-2.13 —
nri-kubernetes-2.13-compat affected Chainguard nri-kubernetes-2.13-compat —
Upstream advisory

CGA-m4x5-fqmp-jhgm

Open SourcePoC exploit2026-01-28

CGA-m4x5-fqmp-jhgm

Affected products

ProductStatusVendorPackageEcosystem
nri-discovery-kubernetes affected Chainguard nri-discovery-kubernetes —
nri-discovery-kubernetes affected Wolfi nri-discovery-kubernetes —
nri-discovery-kubernetes-compat affected Wolfi nri-discovery-kubernetes-compat —
nri-discovery-kubernetes-compat affected Chainguard nri-discovery-kubernetes-compat —
Upstream advisory

CGA-jxj9-r892-jc6f

Open SourcePoC exploit2026-01-28

CGA-jxj9-r892-jc6f

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
Upstream advisory

CGA-jxph-77h6-7r6f

Open SourcePoC exploit2026-01-28

CGA-jxph-77h6-7r6f

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-2.6 affected Chainguard kubernetes-csi-node-driver-registrar-2.6 —
kubernetes-csi-node-driver-registrar-2.6-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.6-compat —
Upstream advisory

CGA-jx72-gxrf-rw2m

Open SourcePoC exploit2026-01-28

CGA-jx72-gxrf-rw2m

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.8 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8 —
kubernetes-csi-node-driver-registrar-fips-2.8-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8-compat —
Upstream advisory

CGA-jmwc-2p9c-hj83

Open SourcePoC exploit2026-01-28

CGA-jmwc-2p9c-hj83

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer affected Chainguard kubernetes-csi-external-resizer —
kubernetes-csi-external-resizer affected Wolfi kubernetes-csi-external-resizer —
Upstream advisory

CGA-j8q6-rhfr-p6ww

Open SourcePoC exploit2026-01-28

CGA-j8q6-rhfr-p6ww

Affected products

ProductStatusVendorPackageEcosystem
nri-kubernetes affected Chainguard nri-kubernetes —
nri-kubernetes affected Wolfi nri-kubernetes —
Upstream advisory

CGA-j398-fp47-3wf5

Open SourcePoC exploit2026-01-28

CGA-j398-fp47-3wf5

Affected products

ProductStatusVendorPackageEcosystem
protoc-gen-go-grpc affected Chainguard protoc-gen-go-grpc —
protoc-gen-go-grpc affected Wolfi protoc-gen-go-grpc —
Upstream advisory

CGA-h363-2hvx-9cj5

Open SourcePoC exploit2026-01-28

CGA-h363-2hvx-9cj5

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-gmmp-7w24-66h2

Open SourcePoC exploit2026-01-28

CGA-gmmp-7w24-66h2

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dashboard affected Chainguard kubernetes-dashboard —
kubernetes-dashboard affected Wolfi kubernetes-dashboard —
Upstream advisory

CGA-fx5w-8h69-qc29

Open SourcePoC exploit2026-01-28

CGA-fx5w-8h69-qc29

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt-operator affected Chainguard k8sgpt-operator —
k8sgpt-operator affected Wolfi k8sgpt-operator —
Upstream advisory

CGA-hx4h-gf4r-3hxw

Open SourcePoC exploit2026-01-28

CGA-hx4h-gf4r-3hxw

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-fips-2.10 affected Chainguard kubernetes-csi-livenessprobe-fips-2.10 —
Upstream advisory

CGA-hv87-fg78-wjh7

Open SourcePoC exploit2026-01-28

CGA-hv87-fg78-wjh7

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
Upstream advisory

CGA-hjww-hr2w-vw69

Open SourcePoC exploit2026-01-28

CGA-hjww-hr2w-vw69

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

CGA-hhpf-g3ch-f2jv

Open SourcePoC exploit2026-01-28

CGA-hhpf-g3ch-f2jv

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.6 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.6 —
kubernetes-csi-node-driver-registrar-fips-2.6-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.6-compat —
Upstream advisory

CGA-h94h-w9cv-hfj7

Open SourcePoC exploit2026-01-28

CGA-h94h-w9cv-hfj7

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-h6v2-36fx-5cxf

Open SourcePoC exploit2026-01-28

CGA-h6v2-36fx-5cxf

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-event-exporter affected Chainguard kubernetes-event-exporter —
kubernetes-event-exporter affected Wolfi kubernetes-event-exporter —
kubernetes-event-exporter-bitnami-compat affected Chainguard kubernetes-event-exporter-bitnami-compat —
kubernetes-event-exporter-bitnami-compat affected Wolfi kubernetes-event-exporter-bitnami-compat —
Upstream advisory

CGA-h6g6-24gj-8g87

Open SourcePoC exploit2026-01-28

CGA-h6g6-24gj-8g87

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dashboard-metrics-scraper-fips affected Chainguard kubernetes-dashboard-metrics-scraper-fips —
Upstream advisory

CGA-g5jq-55fh-mvr4

Open SourcePoC exploit2026-01-28

CGA-g5jq-55fh-mvr4

Affected products

ProductStatusVendorPackageEcosystem
dex-k8s-authenticator affected Chainguard dex-k8s-authenticator —
Upstream advisory

CGA-fp44-6r22-fpqr

Open SourcePoC exploit2026-01-28

CGA-fp44-6r22-fpqr

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-provisioner affected Chainguard kubernetes-csi-external-provisioner —
kubernetes-csi-external-provisioner affected Wolfi kubernetes-csi-external-provisioner —
Upstream advisory

CGA-f89g-q84m-f72f

Open SourcePoC exploit2026-01-28

CGA-f89g-q84m-f72f

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-provisioner-3.6 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-3.6 —
Upstream advisory

CGA-f858-25gf-x35q

Open SourcePoC exploit2026-01-28

CGA-f858-25gf-x35q

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-1.10 affected Wolfi kubernetes-csi-external-resizer-1.10 —
kubernetes-csi-external-resizer-1.10 affected Chainguard kubernetes-csi-external-resizer-1.10 —
Upstream advisory

CGA-9j93-762h-9883

Open SourcePoC exploit2026-01-28

CGA-9j93-762h-9883

Affected products

ProductStatusVendorPackageEcosystem
k8ssandra-operator-fips affected Chainguard k8ssandra-operator-fips —
k8ssandra-operator-fips-compat affected Chainguard k8ssandra-operator-fips-compat —
Upstream advisory

CGA-9h7p-f9x2-5734

Open SourcePoC exploit2026-01-28

CGA-9h7p-f9x2-5734

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-node-driver-registrar-2.9 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-2.9 —
Upstream advisory

CGA-gx5x-qrj3-xpvm

Open SourcePoC exploit2026-01-28

CGA-gx5x-qrj3-xpvm

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
Upstream advisory

CGA-cvmc-gfqx-733x

Open SourcePoC exploit2026-01-28

CGA-cvmc-gfqx-733x

Affected products

ProductStatusVendorPackageEcosystem
grpc-health-probe affected Wolfi grpc-health-probe —
grpc-health-probe affected Chainguard grpc-health-probe —
grpc-health-probe-compat affected Chainguard grpc-health-probe-compat —
grpc-health-probe-compat affected Wolfi grpc-health-probe-compat —
Upstream advisory

CGA-cmpm-954c-v92h

Open SourcePoC exploit2026-01-28

CGA-cmpm-954c-v92h

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-1.9 affected Chainguard kubernetes-csi-external-resizer-1.9 —
Upstream advisory

CGA-c429-pqwg-mx28

Open SourcePoC exploit2026-01-28

CGA-c429-pqwg-mx28

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
Upstream advisory

CGA-9xp5-2xcc-ghvx

Open SourcePoC exploit2026-01-28

CGA-9xp5-2xcc-ghvx

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-provisioner-4.0 affected Chainguard eks-distro-kubernetes-csi-external-provisioner-4.0 —
Upstream advisory

CGA-9wrg-6wx3-6rwv

Open SourcePoC exploit2026-01-28

CGA-9wrg-6wx3-6rwv

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dashboard-metrics-scraper affected Chainguard kubernetes-dashboard-metrics-scraper —
kubernetes-dashboard-metrics-scraper affected Wolfi kubernetes-dashboard-metrics-scraper —
Upstream advisory

CGA-9w5w-82c4-j49c

Open SourcePoC exploit2026-01-28

CGA-9w5w-82c4-j49c

Affected products

ProductStatusVendorPackageEcosystem
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
Upstream advisory

CGA-96xm-gw6v-6q93

Open SourcePoC exploit2026-01-28

CGA-96xm-gw6v-6q93

Affected products

ProductStatusVendorPackageEcosystem
volume-modifier-for-k8s affected Chainguard volume-modifier-for-k8s —
volume-modifier-for-k8s affected Wolfi volume-modifier-for-k8s —
Upstream advisory

CGA-958v-9mr7-jjj2

Open SourcePoC exploit2026-01-28

CGA-958v-9mr7-jjj2

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-4.4 affected Chainguard kubernetes-csi-external-attacher-4.4 —
kubernetes-csi-external-attacher-4.4 affected Wolfi kubernetes-csi-external-attacher-4.4 —
Upstream advisory

CGA-8rjm-r2gp-5wp6

Open SourcePoC exploit2026-01-28

CGA-8rjm-r2gp-5wp6

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
Upstream advisory

CGA-86mp-87m2-57v8

Open SourcePoC exploit2026-01-28

CGA-86mp-87m2-57v8

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-node-driver-registrar-fips-2.7 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.7 —
kubernetes-csi-node-driver-registrar-fips-2.7-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.7-compat —
Upstream advisory

CGA-84mg-5ggv-f793

Open SourcePoC exploit2026-01-28

CGA-84mg-5ggv-f793

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-attacher-4.4 affected Chainguard eks-distro-kubernetes-csi-external-attacher-4.4 —
Upstream advisory

CGA-7w3g-hh88-rvqr

Open SourcePoC exploit2026-01-28

CGA-7w3g-hh88-rvqr

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21-compat affected Chainguard istio-cni-1.21-compat —
istio-cni-1.21-compat affected Wolfi istio-cni-1.21-compat —
istio-install-cni-1.21 affected Chainguard istio-install-cni-1.21 —
istio-install-cni-1.21 affected Wolfi istio-install-cni-1.21 —
istio-install-cni-1.21-compat affected Chainguard istio-install-cni-1.21-compat —
istio-install-cni-1.21-compat affected Wolfi istio-install-cni-1.21-compat —
Upstream advisory

CGA-96c7-w3f9-6vgj

Open SourcePoC exploit2026-01-28

CGA-96c7-w3f9-6vgj

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-fips-1.10 affected Chainguard kubernetes-csi-external-resizer-fips-1.10 —
Upstream advisory

CGA-8r93-28f6-q32x

Open SourcePoC exploit2026-01-28

CGA-8r93-28f6-q32x

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-fips-1.8 affected Chainguard kubernetes-csi-external-resizer-fips-1.8 —
Upstream advisory

CGA-8p43-7hfc-3ghr

Open SourcePoC exploit2026-01-28

CGA-8p43-7hfc-3ghr

Affected products

ProductStatusVendorPackageEcosystem
vault-k8s-fips affected Chainguard vault-k8s-fips —
Upstream advisory

CGA-884v-7gjq-mwqg

Open SourcePoC exploit2026-01-28

CGA-884v-7gjq-mwqg

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-node-driver-registrar-2.10 affected Chainguard eks-distro-kubernetes-csi-node-driver-registrar-2.10 —
Upstream advisory

CGA-7pmp-3vm9-m6w4

Open SourcePoC exploit2026-01-28

CGA-7pmp-3vm9-m6w4

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-fips-4.3 affected Chainguard kubernetes-csi-external-attacher-fips-4.3 —
Upstream advisory

CGA-7j5f-3rcw-wg3q

Open SourcePoC exploit2026-01-28

CGA-7j5f-3rcw-wg3q

Affected products

ProductStatusVendorPackageEcosystem
doppler-kubernetes-operator affected Chainguard doppler-kubernetes-operator —
doppler-kubernetes-operator affected Wolfi doppler-kubernetes-operator —
Upstream advisory

CGA-7648-c385-wv6f

Open SourcePoC exploit2026-01-28

CGA-7648-c385-wv6f

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
Upstream advisory

CGA-6w6f-v3c3-jgwp

Open SourcePoC exploit2026-01-28

CGA-6w6f-v3c3-jgwp

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
Upstream advisory

CGA-6vfw-xjx6-3x7m

GooglePoC exploit2026-01-28

CGA-6vfw-xjx6-3x7m

Affected products

ProductStatusVendorPackageEcosystem
terraform-provider-google affected Wolfi terraform-provider-google —
terraform-provider-google affected Chainguard terraform-provider-google —
Upstream advisory

CGA-6qxf-wjmx-345v

Open SourcePoC exploit2026-01-28

CGA-6qxf-wjmx-345v

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-4.3 affected Chainguard kubernetes-csi-external-attacher-4.3 —
kubernetes-csi-external-attacher-4.3 affected Wolfi kubernetes-csi-external-attacher-4.3 —
Upstream advisory

CGA-645m-h5rm-5r7h

Open SourcePoC exploit2026-01-28

CGA-645m-h5rm-5r7h

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-5q6q-7v35-3pwg

Open SourcePoC exploit2026-01-28

CGA-5q6q-7v35-3pwg

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
Upstream advisory

CGA-52vw-3688-3wgm

Open SourcePoC exploit2026-01-28

CGA-52vw-3688-3wgm

Affected products

ProductStatusVendorPackageEcosystem
bazelisk affected Chainguard bazelisk —
bazelisk affected Wolfi bazelisk —
bazelisk-default affected Chainguard bazelisk-default —
bazelisk-default affected Wolfi bazelisk-default —
Upstream advisory

CGA-4qgv-q87x-cj49

Open SourcePoC exploit2026-01-28

CGA-4qgv-q87x-cj49

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-attacher-fips-4.4 affected Chainguard kubernetes-csi-external-attacher-fips-4.4 —
Upstream advisory

CGA-4q8p-433f-f647

Open SourcePoC exploit2026-01-28

CGA-4q8p-433f-f647

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-livenessprobe-2.12 affected Chainguard eks-distro-kubernetes-csi-livenessprobe-2.12 —
Upstream advisory

CGA-4cr9-h8qw-fv47

Open SourcePoC exploit2026-01-28

CGA-4cr9-h8qw-fv47

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
Upstream advisory

CGA-6273-cmv9-r9x3

Open SourcePoC exploit2026-01-28

CGA-6273-cmv9-r9x3

Affected products

ProductStatusVendorPackageEcosystem
grpcurl affected Chainguard grpcurl —
grpcurl affected Wolfi grpcurl —
Upstream advisory

CGA-4vwh-8qmx-qgg3

Open SourcePoC exploit2026-01-28

CGA-4vwh-8qmx-qgg3

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
Upstream advisory

CGA-4p79-xp4q-63w9

Open SourcePoC exploit2026-01-28

CGA-4p79-xp4q-63w9

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-snapshotter affected Chainguard kubernetes-csi-external-snapshotter —
kubernetes-csi-external-snapshotter affected Wolfi kubernetes-csi-external-snapshotter —
Upstream advisory

CGA-4g2j-qp9c-33rp

Open SourcePoC exploit2026-01-28

CGA-4g2j-qp9c-33rp

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-fips-1.29 affected Chainguard kubeadm-fips-1.29 —
kubeadm-fips-1.29-default affected Chainguard kubeadm-fips-1.29-default —
kube-apiserver-fips-1.29 affected Chainguard kube-apiserver-fips-1.29 —
kube-apiserver-fips-1.29-default affected Chainguard kube-apiserver-fips-1.29-default —
kube-controller-manager-fips-1.29 affected Chainguard kube-controller-manager-fips-1.29 —
kube-controller-manager-fips-1.29-default affected Chainguard kube-controller-manager-fips-1.29-default —
kubectl-bash-completion-fips-1.29 affected Chainguard kubectl-bash-completion-fips-1.29 —
kubectl-fips-1.29 affected Chainguard kubectl-fips-1.29 —
kubectl-fips-1.29-default affected Chainguard kubectl-fips-1.29-default —
kubelet-fips-1.29 affected Chainguard kubelet-fips-1.29 —
kubelet-fips-1.29-default affected Chainguard kubelet-fips-1.29-default —
kube-proxy-fips-1.29 affected Chainguard kube-proxy-fips-1.29 —
kube-proxy-fips-1.29-default affected Chainguard kube-proxy-fips-1.29-default —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-fips-1.29-default affected Chainguard kubernetes-fips-1.29-default —
kube-scheduler-fips-1.29 affected Chainguard kube-scheduler-fips-1.29 —
kube-scheduler-fips-1.29-default affected Chainguard kube-scheduler-fips-1.29-default —
Upstream advisory

CGA-399h-j7j5-qqgx

Open SourcePoC exploit2026-01-28

CGA-399h-j7j5-qqgx

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-fips-1.9 affected Chainguard kubernetes-csi-external-resizer-fips-1.9 —
Upstream advisory

CGA-45px-77cr-66hq

Open SourcePoC exploit2026-01-28

CGA-45px-77cr-66hq

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-external-resizer-1.8 affected Chainguard kubernetes-csi-external-resizer-1.8 —
Upstream advisory

CGA-3xq7-2qmg-j57x

Open SourcePoC exploit2026-01-28

CGA-3xq7-2qmg-j57x

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-csi-livenessprobe-2.10 affected Chainguard kubernetes-csi-livenessprobe-2.10 —
Upstream advisory

CGA-3jr7-jv8r-gpcq

Open SourcePoC exploit2026-01-28

CGA-3jr7-jv8r-gpcq

Affected products

ProductStatusVendorPackageEcosystem
cni-plugins affected Wolfi cni-plugins —
cni-plugins affected Chainguard cni-plugins —
cni-plugins-aws-k8s-compat affected Chainguard cni-plugins-aws-k8s-compat —
cni-plugins-aws-k8s-compat affected Wolfi cni-plugins-aws-k8s-compat —
cni-plugins-bandwidth affected Chainguard cni-plugins-bandwidth —
cni-plugins-bandwidth affected Wolfi cni-plugins-bandwidth —
cni-plugins-bandwidth-compat affected Chainguard cni-plugins-bandwidth-compat —
cni-plugins-bandwidth-compat affected Wolfi cni-plugins-bandwidth-compat —
cni-plugins-bridge affected Chainguard cni-plugins-bridge —
cni-plugins-bridge affected Wolfi cni-plugins-bridge —
cni-plugins-bridge-compat affected Chainguard cni-plugins-bridge-compat —
cni-plugins-bridge-compat affected Wolfi cni-plugins-bridge-compat —
cni-plugins-dhcp affected Chainguard cni-plugins-dhcp —
cni-plugins-dhcp affected Wolfi cni-plugins-dhcp —
cni-plugins-dhcp-compat affected Chainguard cni-plugins-dhcp-compat —
cni-plugins-dhcp-compat affected Wolfi cni-plugins-dhcp-compat —
cni-plugins-dummy affected Chainguard cni-plugins-dummy —
cni-plugins-dummy affected Wolfi cni-plugins-dummy —
cni-plugins-dummy-compat affected Chainguard cni-plugins-dummy-compat —
cni-plugins-dummy-compat affected Wolfi cni-plugins-dummy-compat —
cni-plugins-firewall affected Chainguard cni-plugins-firewall —
cni-plugins-firewall affected Wolfi cni-plugins-firewall —
cni-plugins-firewall-compat affected Chainguard cni-plugins-firewall-compat —
cni-plugins-firewall-compat affected Wolfi cni-plugins-firewall-compat —
cni-plugins-host-device affected Chainguard cni-plugins-host-device —
cni-plugins-host-device affected Wolfi cni-plugins-host-device —
cni-plugins-host-device-compat affected Chainguard cni-plugins-host-device-compat —
cni-plugins-host-device-compat affected Wolfi cni-plugins-host-device-compat —
cni-plugins-host-local affected Chainguard cni-plugins-host-local —
cni-plugins-host-local affected Wolfi cni-plugins-host-local —
cni-plugins-host-local-compat affected Chainguard cni-plugins-host-local-compat —
cni-plugins-host-local-compat affected Wolfi cni-plugins-host-local-compat —
cni-plugins-ipam affected Chainguard cni-plugins-ipam —
cni-plugins-ipam affected Wolfi cni-plugins-ipam —
cni-plugins-ipvlan affected Chainguard cni-plugins-ipvlan —
cni-plugins-ipvlan affected Wolfi cni-plugins-ipvlan —
cni-plugins-ipvlan-compat affected Chainguard cni-plugins-ipvlan-compat —
cni-plugins-ipvlan-compat affected Wolfi cni-plugins-ipvlan-compat —
cni-plugins-loopback affected Chainguard cni-plugins-loopback —
cni-plugins-loopback affected Wolfi cni-plugins-loopback —
cni-plugins-loopback-compat affected Chainguard cni-plugins-loopback-compat —
cni-plugins-loopback-compat affected Wolfi cni-plugins-loopback-compat —
cni-plugins-macvlan affected Chainguard cni-plugins-macvlan —
cni-plugins-macvlan affected Wolfi cni-plugins-macvlan —
cni-plugins-macvlan-compat affected Chainguard cni-plugins-macvlan-compat —
cni-plugins-macvlan-compat affected Wolfi cni-plugins-macvlan-compat —
cni-plugins-main affected Chainguard cni-plugins-main —
cni-plugins-main affected Wolfi cni-plugins-main —
cni-plugins-meta affected Chainguard cni-plugins-meta —
cni-plugins-meta affected Wolfi cni-plugins-meta —
cni-plugins-portmap affected Chainguard cni-plugins-portmap —
cni-plugins-portmap affected Wolfi cni-plugins-portmap —
cni-plugins-portmap-compat affected Chainguard cni-plugins-portmap-compat —
cni-plugins-portmap-compat affected Wolfi cni-plugins-portmap-compat —
cni-plugins-ptp affected Chainguard cni-plugins-ptp —
cni-plugins-ptp affected Wolfi cni-plugins-ptp —
cni-plugins-ptp-compat affected Chainguard cni-plugins-ptp-compat —
cni-plugins-ptp-compat affected Wolfi cni-plugins-ptp-compat —
cni-plugins-sbr affected Chainguard cni-plugins-sbr —
cni-plugins-sbr affected Wolfi cni-plugins-sbr —
cni-plugins-sbr-compat affected Chainguard cni-plugins-sbr-compat —
cni-plugins-sbr-compat affected Wolfi cni-plugins-sbr-compat —
cni-plugins-static affected Chainguard cni-plugins-static —
cni-plugins-static affected Wolfi cni-plugins-static —
cni-plugins-static-compat affected Chainguard cni-plugins-static-compat —
cni-plugins-static-compat affected Wolfi cni-plugins-static-compat —
cni-plugins-tap affected Chainguard cni-plugins-tap —
cni-plugins-tap affected Wolfi cni-plugins-tap —
cni-plugins-tap-compat affected Chainguard cni-plugins-tap-compat —
cni-plugins-tap-compat affected Wolfi cni-plugins-tap-compat —
cni-plugins-tuning affected Chainguard cni-plugins-tuning —
cni-plugins-tuning affected Wolfi cni-plugins-tuning —
cni-plugins-tuning-compat affected Chainguard cni-plugins-tuning-compat —
cni-plugins-tuning-compat affected Wolfi cni-plugins-tuning-compat —
cni-plugins-vlan affected Chainguard cni-plugins-vlan —
cni-plugins-vlan affected Wolfi cni-plugins-vlan —
cni-plugins-vlan-compat affected Chainguard cni-plugins-vlan-compat —
cni-plugins-vlan-compat affected Wolfi cni-plugins-vlan-compat —
cni-plugins-vrf affected Chainguard cni-plugins-vrf —
cni-plugins-vrf affected Wolfi cni-plugins-vrf —
cni-plugins-vrf-compat affected Chainguard cni-plugins-vrf-compat —
cni-plugins-vrf-compat affected Wolfi cni-plugins-vrf-compat —
Upstream advisory

CGA-3f9g-j4jm-qhvx

Open SourcePoC exploit2026-01-28

CGA-3f9g-j4jm-qhvx

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-ingress-defaultbackend affected Chainguard kubernetes-ingress-defaultbackend —
kubernetes-ingress-defaultbackend affected Wolfi kubernetes-ingress-defaultbackend —
Upstream advisory

CGA-2vm3-98gj-572g

Open SourcePoC exploit2026-01-28

CGA-2vm3-98gj-572g

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
Upstream advisory

CGA-2f8r-g4v3-7fp9

Open SourcePoC exploit2026-01-28

CGA-2f8r-g4v3-7fp9

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
Upstream advisory

CGA-2843-fcvf-8h92

Open SourcePoC exploit2026-01-28

CGA-2843-fcvf-8h92

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-resizer-1.9 affected Chainguard eks-distro-kubernetes-csi-external-resizer-1.9 —
Upstream advisory

CGA-2329-x2qf-95fq

Open SourcePoC exploit2026-01-28

CGA-2329-x2qf-95fq

Affected products

ProductStatusVendorPackageEcosystem
eks-distro-kubernetes-csi-external-attacher-4.5 affected Chainguard eks-distro-kubernetes-csi-external-attacher-4.5 —
Upstream advisory

openSUSE-SU-2026:10090-1

GooglePoC exploit2026-01-26

google-osconfig-agent-20260119.00-1.1 on GA media

Affected products

ProductStatusVendorPackageEcosystem
google-osconfig-agent affected openSUSE:Tumbleweed google-osconfig-agent —
Upstream advisory

CGA-cp2m-4m66-fgvg

Open SourcePoC exploit2026-01-07

CGA-cp2m-4m66-fgvg

Affected products

ProductStatusVendorPackageEcosystem
aactl affected Chainguard aactl —
aactl affected Wolfi aactl —
actions-runner-controller affected Wolfi actions-runner-controller —
actions-runner-controller affected Chainguard actions-runner-controller —
actions-runner-controller-fips affected Chainguard actions-runner-controller-fips —
addon-resizer affected Chainguard addon-resizer —
addon-resizer affected Wolfi addon-resizer —
addon-resizer-compat affected Wolfi addon-resizer-compat —
addon-resizer-compat affected Chainguard addon-resizer-compat —
addon-resizer-fips affected Chainguard addon-resizer-fips —
addon-resizer-fips-compat affected Chainguard addon-resizer-fips-compat —
amass affected Wolfi amass —
amass affected Chainguard amass —
apko affected Wolfi apko —
apko affected Chainguard apko —
argo-cd-2.10 affected Wolfi argo-cd-2.10 —
argo-cd-2.10 affected Chainguard argo-cd-2.10 —
argo-cd-2.10-compat affected Wolfi argo-cd-2.10-compat —
argo-cd-2.10-compat affected Chainguard argo-cd-2.10-compat —
argo-cd-2.10-repo-server affected Wolfi argo-cd-2.10-repo-server —
argo-cd-2.10-repo-server affected Chainguard argo-cd-2.10-repo-server —
argo-cd-2.8 affected Chainguard argo-cd-2.8 —
argo-cd-2.8 affected Wolfi argo-cd-2.8 —
argo-cd-2.9 affected Chainguard argo-cd-2.9 —
argo-cd-2.9 affected Wolfi argo-cd-2.9 —
argo-cd-2.9-compat affected Chainguard argo-cd-2.9-compat —
argo-cd-2.9-compat affected Wolfi argo-cd-2.9-compat —
argo-cd-2.9-repo-server affected Wolfi argo-cd-2.9-repo-server —
argo-cd-2.9-repo-server affected Chainguard argo-cd-2.9-repo-server —
argo-cd-fips-2.10 affected Chainguard argo-cd-fips-2.10 —
argo-cd-fips-2.8 affected Chainguard argo-cd-fips-2.8 —
argo-cd-fips-2.9 affected Chainguard argo-cd-fips-2.9 —
argo-workflow-cli affected Chainguard argo-workflow-cli —
argo-workflow-cli affected Wolfi argo-workflow-cli —
argo-workflow-cli-fips affected Chainguard argo-workflow-cli-fips —
argo-workflow-controller affected Wolfi argo-workflow-controller —
argo-workflow-controller affected Chainguard argo-workflow-controller —
argo-workflow-controller-compat affected Chainguard argo-workflow-controller-compat —
argo-workflow-controller-compat affected Wolfi argo-workflow-controller-compat —
argo-workflow-controller-compat-fips affected Chainguard argo-workflow-controller-compat-fips —
argo-workflow-controller-fips affected Chainguard argo-workflow-controller-fips —
argo-workflow-executor affected Chainguard argo-workflow-executor —
argo-workflow-executor affected Wolfi argo-workflow-executor —
argo-workflow-executor-compat affected Wolfi argo-workflow-executor-compat —
argo-workflow-executor-compat affected Chainguard argo-workflow-executor-compat —
argo-workflow-executor-compat-fips affected Chainguard argo-workflow-executor-compat-fips —
argo-workflow-executor-fips affected Chainguard argo-workflow-executor-fips —
argo-workflows affected Chainguard argo-workflows —
argo-workflows affected Wolfi argo-workflows —
argo-workflows-fips affected Chainguard argo-workflows-fips —
argo-workflows-known-hosts affected Chainguard argo-workflows-known-hosts —
argo-workflows-known-hosts affected Wolfi argo-workflows-known-hosts —
argo-workflows-known-hosts-fips affected Chainguard argo-workflows-known-hosts-fips —
argo-workflows-ui affected Chainguard argo-workflows-ui —
argo-workflows-ui affected Wolfi argo-workflows-ui —
atlantis affected Chainguard atlantis —
atlantis affected Wolfi atlantis —
atlantis-fips affected Chainguard atlantis-fips —
aws-ebs-csi-driver affected Chainguard aws-ebs-csi-driver —
aws-ebs-csi-driver affected Wolfi aws-ebs-csi-driver —
aws-ebs-csi-driver-1.18 affected Chainguard aws-ebs-csi-driver-1.18 —
aws-ebs-csi-driver-1.19 affected Chainguard aws-ebs-csi-driver-1.19 —
aws-ebs-csi-driver-fips affected Chainguard aws-ebs-csi-driver-fips —
aws-efs-csi-driver affected Chainguard aws-efs-csi-driver —
aws-efs-csi-driver affected Wolfi aws-efs-csi-driver —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
aws-efs-csi-driver-fips-1.6 affected Chainguard aws-efs-csi-driver-fips-1.6 —
aws-flb-cloudwatch affected Wolfi aws-flb-cloudwatch —
aws-flb-cloudwatch affected Chainguard aws-flb-cloudwatch —
aws-flb-firehose affected Chainguard aws-flb-firehose —
aws-flb-firehose affected Wolfi aws-flb-firehose —
aws-flb-kinesis affected Chainguard aws-flb-kinesis —
aws-flb-kinesis affected Wolfi aws-flb-kinesis —
aws-load-balancer-controller affected Wolfi aws-load-balancer-controller —
aws-load-balancer-controller affected Chainguard aws-load-balancer-controller —
aws-load-balancer-controller-2.4.5 affected Chainguard aws-load-balancer-controller-2.4.5 —
aws-load-balancer-controller-2.5 affected Chainguard aws-load-balancer-controller-2.5 —
aws-load-balancer-controller-compat affected Wolfi aws-load-balancer-controller-compat —
aws-load-balancer-controller-compat affected Chainguard aws-load-balancer-controller-compat —
aws-load-balancer-controller-fips affected Chainguard aws-load-balancer-controller-fips —
aws-network-policy-agent affected Chainguard aws-network-policy-agent —
aws-network-policy-agent affected Wolfi aws-network-policy-agent —
aws-network-policy-agent-compat affected Chainguard aws-network-policy-agent-compat —
aws-network-policy-agent-compat affected Wolfi aws-network-policy-agent-compat —
azure-aad-pod-identity-mic affected Chainguard azure-aad-pod-identity-mic —
bank-vaults affected Wolfi bank-vaults —
bank-vaults affected Chainguard bank-vaults —
bank-vaults-fips affected Chainguard bank-vaults-fips —
bank-vaults-template affected Wolfi bank-vaults-template —
bank-vaults-template affected Chainguard bank-vaults-template —
bank-vaults-template-fips affected Chainguard bank-vaults-template-fips —
bazelisk affected Chainguard bazelisk —
bazelisk affected Wolfi bazelisk —
bincapz affected Chainguard bincapz —
bincapz affected Wolfi bincapz —
bom affected Wolfi bom —
bom affected Chainguard bom —
boring-registry affected Chainguard boring-registry —
boring-registry affected Wolfi boring-registry —
boring-registry-fips affected Chainguard boring-registry-fips —
buf affected Wolfi buf —
buf affected Chainguard buf —
buildkitd affected Wolfi buildkitd —
buildkitd affected Chainguard buildkitd —
caddy affected Wolfi caddy —
caddy affected Chainguard caddy —
caddy-fips affected Chainguard caddy-fips —
caddy-man affected Chainguard caddy-man —
caddy-man affected Wolfi caddy-man —
caddy-src affected Wolfi caddy-src —
caddy-src affected Chainguard caddy-src —
cadvisor affected Wolfi cadvisor —
cadvisor affected Chainguard cadvisor —
cadvisor-fips affected Chainguard cadvisor-fips —
calico affected Wolfi calico —
calico affected Chainguard calico —
calico-apiserver affected Wolfi calico-apiserver —
calico-apiserver affected Chainguard calico-apiserver —
calico-app-policy affected Wolfi calico-app-policy —
calico-app-policy affected Chainguard calico-app-policy —
calico-cni affected Wolfi calico-cni —
calico-cni affected Chainguard calico-cni —
calico-cni-compat affected Chainguard calico-cni-compat —
calico-cni-compat affected Wolfi calico-cni-compat —
calico-cni-fips-3.25-compat affected Chainguard calico-cni-fips-3.25-compat —
calico-cni-fips-compat affected Chainguard calico-cni-fips-compat —
calicoctl affected Chainguard calicoctl —
calicoctl affected Wolfi calicoctl —
calicoctl-fips affected Chainguard calicoctl-fips —
calicoctl-fips-3.25 affected Chainguard calicoctl-fips-3.25 —
calico-felix affected Chainguard calico-felix —
calico-felix affected Wolfi calico-felix —
calico-fips affected Chainguard calico-fips —
calico-fips-3.25 affected Chainguard calico-fips-3.25 —
calico-fips-apiserver affected Chainguard calico-fips-apiserver —
calico-fips-apiserver-3.25 affected Chainguard calico-fips-apiserver-3.25 —
calico-fips-app-policy affected Chainguard calico-fips-app-policy —
calico-fips-app-policy-3.25 affected Chainguard calico-fips-app-policy-3.25 —
calico-fips-cni affected Chainguard calico-fips-cni —
calico-fips-cni-3.25 affected Chainguard calico-fips-cni-3.25 —
calico-fips-felix affected Chainguard calico-fips-felix —
calico-fips-felix-3.25 affected Chainguard calico-fips-felix-3.25 —
calico-fips-key-cert-provisioner affected Chainguard calico-fips-key-cert-provisioner —
calico-fips-kube-controllers affected Chainguard calico-fips-kube-controllers —
calico-fips-kube-controllers-3.25 affected Chainguard calico-fips-kube-controllers-3.25 —
calico-fips-node affected Chainguard calico-fips-node —
calico-fips-node-3.25 affected Chainguard calico-fips-node-3.25 —
calico-fips-pod2daemon affected Chainguard calico-fips-pod2daemon —
calico-fips-pod2daemon-3.25 affected Chainguard calico-fips-pod2daemon-3.25 —
calico-fips-typha-client affected Chainguard calico-fips-typha-client —
calico-fips-typha-client-3.25 affected Chainguard calico-fips-typha-client-3.25 —
calico-fips-typhad affected Chainguard calico-fips-typhad —
calico-fips-typhad-3.25 affected Chainguard calico-fips-typhad-3.25 —
calico-key-cert-provisioner affected Wolfi calico-key-cert-provisioner —
calico-key-cert-provisioner affected Chainguard calico-key-cert-provisioner —
calico-kube-controllers affected Chainguard calico-kube-controllers —
calico-kube-controllers affected Wolfi calico-kube-controllers —
calico-node affected Chainguard calico-node —
calico-node affected Wolfi calico-node —
calico-pod2daemon affected Chainguard calico-pod2daemon —
calico-pod2daemon affected Wolfi calico-pod2daemon —
calico-pod2daemon-flexvol-compat affected Chainguard calico-pod2daemon-flexvol-compat —
calico-pod2daemon-flexvol-compat affected Wolfi calico-pod2daemon-flexvol-compat —
calico-typha-client affected Wolfi calico-typha-client —
calico-typha-client affected Chainguard calico-typha-client —
calico-typhad affected Chainguard calico-typhad —
calico-typhad affected Wolfi calico-typhad —
capslock affected Chainguard capslock —
capslock affected Wolfi capslock —
cass-operator affected Wolfi cass-operator —
cass-operator affected Chainguard cass-operator —
cass-operator-fips affected Chainguard cass-operator-fips —
cass-operator-fips-no-pvc-delete affected Chainguard cass-operator-fips-no-pvc-delete —
cert-exporter affected Chainguard cert-exporter —
cert-exporter affected Wolfi cert-exporter —
cert-exporter-fips affected Chainguard cert-exporter-fips —
certificate-transparency affected Wolfi certificate-transparency —
certificate-transparency affected Chainguard certificate-transparency —
certificate-transparency-fips affected Chainguard certificate-transparency-fips —
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.12-acmesolver affected Chainguard cert-manager-1.12-acmesolver —
cert-manager-1.12-acmesolver affected Wolfi cert-manager-1.12-acmesolver —
cert-manager-1.12-cainjector affected Wolfi cert-manager-1.12-cainjector —
cert-manager-1.12-cainjector affected Chainguard cert-manager-1.12-cainjector —
cert-manager-1.12-controller affected Wolfi cert-manager-1.12-controller —
cert-manager-1.12-controller affected Chainguard cert-manager-1.12-controller —
cert-manager-1.12-webhook affected Wolfi cert-manager-1.12-webhook —
cert-manager-1.12-webhook affected Chainguard cert-manager-1.12-webhook —
cert-manager-1.13 affected Chainguard cert-manager-1.13 —
cert-manager-1.13 affected Wolfi cert-manager-1.13 —
cert-manager-1.13-acmesolver affected Wolfi cert-manager-1.13-acmesolver —
cert-manager-1.13-acmesolver affected Chainguard cert-manager-1.13-acmesolver —
cert-manager-1.13-cainjector affected Wolfi cert-manager-1.13-cainjector —
cert-manager-1.13-cainjector affected Chainguard cert-manager-1.13-cainjector —
cert-manager-1.13-controller affected Wolfi cert-manager-1.13-controller —
cert-manager-1.13-controller affected Chainguard cert-manager-1.13-controller —
cert-manager-1.13-webhook affected Wolfi cert-manager-1.13-webhook —
cert-manager-1.13-webhook affected Chainguard cert-manager-1.13-webhook —
cert-manager-1.14 affected Chainguard cert-manager-1.14 —
cert-manager-1.14 affected Wolfi cert-manager-1.14 —
cert-manager-acmesolver-1.12 affected Chainguard cert-manager-acmesolver-1.12 —
cert-manager-acmesolver-1.12-bitnami-compat affected Chainguard cert-manager-acmesolver-1.12-bitnami-compat —
cert-manager-acmesolver-1.12-iamguarded-compat affected Chainguard cert-manager-acmesolver-1.12-iamguarded-compat —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-1.12 affected Chainguard cert-manager-cainjector-1.12 —
cert-manager-cainjector-1.12-bitnami-compat affected Chainguard cert-manager-cainjector-1.12-bitnami-compat —
cert-manager-cainjector-1.12-iamguarded-compat affected Chainguard cert-manager-cainjector-1.12-iamguarded-compat —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-controller-1.12 affected Chainguard cert-manager-controller-1.12 —
cert-manager-controller-1.12-bitnami-compat affected Chainguard cert-manager-controller-1.12-bitnami-compat —
cert-manager-controller-1.12-iamguarded-compat affected Chainguard cert-manager-controller-1.12-iamguarded-compat —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-fips-1.13 affected Chainguard cert-manager-fips-1.13 —
cert-manager-fips-1.14 affected Chainguard cert-manager-fips-1.14 —
cert-manager-fips-1.14-acmesolver affected Chainguard cert-manager-fips-1.14-acmesolver —
cert-manager-fips-1.14-cainjector affected Chainguard cert-manager-fips-1.14-cainjector —
cert-manager-fips-1.14-cmctl affected Chainguard cert-manager-fips-1.14-cmctl —
cert-manager-fips-1.14-controller affected Chainguard cert-manager-fips-1.14-controller —
cert-manager-fips-1.14-startupapicheck affected Chainguard cert-manager-fips-1.14-startupapicheck —
cert-manager-fips-1.14-webhook affected Chainguard cert-manager-fips-1.14-webhook —
cert-manager-webhook-1.12 affected Chainguard cert-manager-webhook-1.12 —
cert-manager-webhook-1.12-bitnami-compat affected Chainguard cert-manager-webhook-1.12-bitnami-compat —
cert-manager-webhook-1.12-iamguarded-compat affected Chainguard cert-manager-webhook-1.12-iamguarded-compat —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
cert-manager-webhook-pdns affected Chainguard cert-manager-webhook-pdns —
cert-manager-webhook-pdns affected Wolfi cert-manager-webhook-pdns —
cert-manager-webhook-pdns-fips affected Chainguard cert-manager-webhook-pdns-fips —
cfssl affected Wolfi cfssl —
cfssl affected Chainguard cfssl —
chainctl affected Chainguard chainctl —
chartmuseum affected Chainguard chartmuseum —
chartmuseum affected Wolfi chartmuseum —
chezmoi affected Chainguard chezmoi —
chezmoi affected Wolfi chezmoi —
cilium-1.14 affected Wolfi cilium-1.14 —
cilium-1.14 affected Chainguard cilium-1.14 —
cilium-1.14-clustermesh-apiserver affected Chainguard cilium-1.14-clustermesh-apiserver —
cilium-1.14-container-init affected Wolfi cilium-1.14-container-init —
cilium-1.14-container-init affected Chainguard cilium-1.14-container-init —
cilium-1.14-container-init-compat affected Chainguard cilium-1.14-container-init-compat —
cilium-1.14-container-init-compat affected Wolfi cilium-1.14-container-init-compat —
cilium-1.14-hubble-relay affected Chainguard cilium-1.14-hubble-relay —
cilium-1.14-hubble-relay affected Wolfi cilium-1.14-hubble-relay —
cilium-1.14-iptables affected Chainguard cilium-1.14-iptables —
cilium-1.14-iptables affected Wolfi cilium-1.14-iptables —
cilium-1.14-operator-aws affected Chainguard cilium-1.14-operator-aws —
cilium-1.14-operator-generic affected Wolfi cilium-1.14-operator-generic —
cilium-1.14-operator-generic affected Chainguard cilium-1.14-operator-generic —
cilium-1.15 affected Chainguard cilium-1.15 —
cilium-1.15 affected Wolfi cilium-1.15 —
cilium-1.15-clustermesh-apiserver affected Chainguard cilium-1.15-clustermesh-apiserver —
cilium-1.15-container-init affected Chainguard cilium-1.15-container-init —
cilium-1.15-container-init affected Wolfi cilium-1.15-container-init —
cilium-1.15-container-init-compat affected Wolfi cilium-1.15-container-init-compat —
cilium-1.15-container-init-compat affected Chainguard cilium-1.15-container-init-compat —
cilium-1.15-hubble-relay affected Wolfi cilium-1.15-hubble-relay —
cilium-1.15-hubble-relay affected Chainguard cilium-1.15-hubble-relay —
cilium-1.15-iptables affected Chainguard cilium-1.15-iptables —
cilium-1.15-iptables affected Wolfi cilium-1.15-iptables —
cilium-1.15-operator-aws affected Chainguard cilium-1.15-operator-aws —
cilium-1.15-operator-generic affected Chainguard cilium-1.15-operator-generic —
cilium-1.15-operator-generic affected Wolfi cilium-1.15-operator-generic —
cilium-cli affected Wolfi cilium-cli —
cilium-cli affected Chainguard cilium-cli —
cilium-fips-1.14 affected Chainguard cilium-fips-1.14 —
cilium-fips-1.14-clustermesh-apiserver affected Chainguard cilium-fips-1.14-clustermesh-apiserver —
cilium-fips-1.14-compat affected Chainguard cilium-fips-1.14-compat —
cilium-fips-1.14-container-init affected Chainguard cilium-fips-1.14-container-init —
cilium-fips-1.14-container-init-compat affected Chainguard cilium-fips-1.14-container-init-compat —
cilium-fips-1.14-host-utils affected Chainguard cilium-fips-1.14-host-utils —
cilium-fips-1.14-hubble-relay affected Chainguard cilium-fips-1.14-hubble-relay —
cilium-fips-1.14-iptables affected Chainguard cilium-fips-1.14-iptables —
cilium-fips-1.14-operator-aws affected Chainguard cilium-fips-1.14-operator-aws —
cilium-fips-1.14-operator-azure affected Chainguard cilium-fips-1.14-operator-azure —
cilium-fips-1.14-operator-generic affected Chainguard cilium-fips-1.14-operator-generic —
cilium-fips-1.15 affected Chainguard cilium-fips-1.15 —
cilium-fips-1.15-clustermesh-apiserver affected Chainguard cilium-fips-1.15-clustermesh-apiserver —
cilium-fips-1.15-container-init affected Chainguard cilium-fips-1.15-container-init —
cilium-fips-1.15-container-init-compat affected Chainguard cilium-fips-1.15-container-init-compat —
cilium-fips-1.15-host-utils affected Chainguard cilium-fips-1.15-host-utils —
cilium-fips-1.15-hubble-relay affected Chainguard cilium-fips-1.15-hubble-relay —
cilium-fips-1.15-operator-aws affected Chainguard cilium-fips-1.15-operator-aws —
cilium-fips-1.15-operator-azure affected Chainguard cilium-fips-1.15-operator-azure —
cilium-fips-1.15-operator-generic affected Chainguard cilium-fips-1.15-operator-generic —
cloudflared affected Chainguard cloudflared —
cloudflared affected Wolfi cloudflared —
cloud-provider-gcp-cloud-controller-manager affected Wolfi cloud-provider-gcp-cloud-controller-manager —
cloud-provider-gcp-cloud-controller-manager affected Chainguard cloud-provider-gcp-cloud-controller-manager —
cloud-provider-gcp-cloud-controller-manager-compat affected Wolfi cloud-provider-gcp-cloud-controller-manager-compat —
cloud-provider-gcp-cloud-controller-manager-compat affected Chainguard cloud-provider-gcp-cloud-controller-manager-compat —
cloud-provider-gcp-cloud-controller-manager-fips affected Chainguard cloud-provider-gcp-cloud-controller-manager-fips —
cloud-provider-gcp-cloud-controller-manager-fips-compat affected Chainguard cloud-provider-gcp-cloud-controller-manager-fips-compat —
cloud-sql-proxy affected Chainguard cloud-sql-proxy —
cloud-sql-proxy affected Wolfi cloud-sql-proxy —
cloud-sql-proxy-fips affected Chainguard cloud-sql-proxy-fips —
cluster-api-controller affected Wolfi cluster-api-controller —
cluster-api-controller affected Chainguard cluster-api-controller —
cluster-autoscaler-1.25 affected Wolfi cluster-autoscaler-1.25 —
cluster-autoscaler-1.25 affected Chainguard cluster-autoscaler-1.25 —
cluster-autoscaler-1.25-compat affected Wolfi cluster-autoscaler-1.25-compat —
cluster-autoscaler-1.25-compat affected Chainguard cluster-autoscaler-1.25-compat —
cluster-autoscaler-1.26 affected Wolfi cluster-autoscaler-1.26 —
cluster-autoscaler-1.26 affected Chainguard cluster-autoscaler-1.26 —
cluster-autoscaler-1.27 affected Chainguard cluster-autoscaler-1.27 —
cluster-autoscaler-1.27 affected Wolfi cluster-autoscaler-1.27 —
cluster-autoscaler-1.28 affected Chainguard cluster-autoscaler-1.28 —
cluster-autoscaler-1.28 affected Wolfi cluster-autoscaler-1.28 —
cluster-autoscaler-1.29 affected Wolfi cluster-autoscaler-1.29 —
cluster-autoscaler-1.29 affected Chainguard cluster-autoscaler-1.29 —
cluster-autoscaler-fips-1.26 affected Chainguard cluster-autoscaler-fips-1.26 —
cluster-autoscaler-fips-1.27 affected Chainguard cluster-autoscaler-fips-1.27 —
cluster-autoscaler-fips-1.28 affected Chainguard cluster-autoscaler-fips-1.28 —
cluster-autoscaler-fips-1.29 affected Chainguard cluster-autoscaler-fips-1.29 —
clusterctl affected Wolfi clusterctl —
clusterctl affected Chainguard clusterctl —
cluster-proportional-autoscaler affected Wolfi cluster-proportional-autoscaler —
cluster-proportional-autoscaler affected Chainguard cluster-proportional-autoscaler —
cmctl-1.12 affected Wolfi cmctl-1.12 —
cmctl-1.12 affected Chainguard cmctl-1.12 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-1.13 affected Chainguard cmctl-1.13 —
cmctl-1.13 affected Wolfi cmctl-1.13 —
cmctl-1.14-fips affected Chainguard cmctl-1.14-fips —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
cni-plugins affected Wolfi cni-plugins —
cni-plugins affected Chainguard cni-plugins —
configmap-reload affected Wolfi configmap-reload —
configmap-reload affected Chainguard configmap-reload —
confluent-common-docker affected Chainguard confluent-common-docker —
confluent-common-docker affected Wolfi confluent-common-docker —
conftest affected Wolfi conftest —
conftest affected Chainguard conftest —
conftest-fips affected Chainguard conftest-fips —
consul-1.15 affected Wolfi consul-1.15 —
consul-1.15 affected Chainguard consul-1.15 —
consul-1.15-oci-entrypoint affected Chainguard consul-1.15-oci-entrypoint —
consul-1.15-oci-entrypoint affected Wolfi consul-1.15-oci-entrypoint —
consul-1.15-oci-entrypoint-compat affected Wolfi consul-1.15-oci-entrypoint-compat —
consul-1.15-oci-entrypoint-compat affected Chainguard consul-1.15-oci-entrypoint-compat —
consul-1.16 affected Wolfi consul-1.16 —
consul-1.16 affected Chainguard consul-1.16 —
consul-1.17 affected Chainguard consul-1.17 —
consul-1.17-fips affected Chainguard consul-1.17-fips —
consul-1.17-fips-oci-entrypoint affected Chainguard consul-1.17-fips-oci-entrypoint —
consul-1.17-fips-oci-entrypoint-compat affected Chainguard consul-1.17-fips-oci-entrypoint-compat —
containerd affected Wolfi containerd —
containerd affected Chainguard containerd —
containerd-service affected Wolfi containerd-service —
containerd-service affected Chainguard containerd-service —
containerd-shim affected Chainguard containerd-shim —
containerd-shim affected Wolfi containerd-shim —
containerd-shim-runc-v1 affected Wolfi containerd-shim-runc-v1 —
containerd-shim-runc-v1 affected Chainguard containerd-shim-runc-v1 —
containerd-shim-runc-v2 affected Wolfi containerd-shim-runc-v2 —
containerd-shim-runc-v2 affected Chainguard containerd-shim-runc-v2 —
containerd-stress affected Chainguard containerd-stress —
containerd-stress affected Wolfi containerd-stress —
contour-1.28 affected Chainguard contour-1.28 —
contour-1.28 affected Wolfi contour-1.28 —
contour-1.28-bitnami-compat affected Chainguard contour-1.28-bitnami-compat —
contour-1.28-compat affected Chainguard contour-1.28-compat —
contour-1.28-iamguarded-compat affected Chainguard contour-1.28-iamguarded-compat —
controller-gen affected Wolfi controller-gen —
controller-gen affected Chainguard controller-gen —
coredns affected Wolfi coredns —
coredns affected Chainguard coredns —
coredns-compat affected Wolfi coredns-compat —
coredns-compat affected Chainguard coredns-compat —
coredns-fips affected Chainguard coredns-fips —
cortex affected Chainguard cortex —
cortex affected Wolfi cortex —
cortex-fips affected Chainguard cortex-fips —
cosign affected Chainguard cosign —
cosign affected Wolfi cosign —
cosign-fips affected Wolfi cosign-fips —
cosign-fips affected Chainguard cosign-fips —
crane affected Chainguard crane —
crane affected Wolfi crane —
cri-tools affected Chainguard cri-tools —
cri-tools affected Wolfi cri-tools —
croc affected Chainguard croc —
croc affected Wolfi croc —
crossplane affected Wolfi crossplane —
crossplane affected Chainguard crossplane —
crossplane-provider-aws affected Wolfi crossplane-provider-aws —
crossplane-provider-aws affected Chainguard crossplane-provider-aws —
crossplane-provider-aws-cloudformation affected Wolfi crossplane-provider-aws-cloudformation —
crossplane-provider-aws-cloudformation affected Chainguard crossplane-provider-aws-cloudformation —
crossplane-provider-aws-cloudformation-compat affected Wolfi crossplane-provider-aws-cloudformation-compat —
crossplane-provider-aws-cloudformation-compat affected Chainguard crossplane-provider-aws-cloudformation-compat —
crossplane-provider-aws-cloudfront affected Wolfi crossplane-provider-aws-cloudfront —
crossplane-provider-aws-cloudfront affected Chainguard crossplane-provider-aws-cloudfront —
crossplane-provider-aws-cloudfront-compat affected Wolfi crossplane-provider-aws-cloudfront-compat —
crossplane-provider-aws-cloudfront-compat affected Chainguard crossplane-provider-aws-cloudfront-compat —
crossplane-provider-aws-cloudwatchlogs affected Wolfi crossplane-provider-aws-cloudwatchlogs —
crossplane-provider-aws-cloudwatchlogs affected Chainguard crossplane-provider-aws-cloudwatchlogs —
crossplane-provider-aws-cloudwatchlogs-compat affected Wolfi crossplane-provider-aws-cloudwatchlogs-compat —
crossplane-provider-aws-cloudwatchlogs-compat affected Chainguard crossplane-provider-aws-cloudwatchlogs-compat —
crossplane-provider-aws-config affected Wolfi crossplane-provider-aws-config —
crossplane-provider-aws-config affected Chainguard crossplane-provider-aws-config —
crossplane-provider-aws-config-compat affected Wolfi crossplane-provider-aws-config-compat —
crossplane-provider-aws-config-compat affected Chainguard crossplane-provider-aws-config-compat —
crossplane-provider-aws-dynamodb affected Wolfi crossplane-provider-aws-dynamodb —
crossplane-provider-aws-dynamodb affected Chainguard crossplane-provider-aws-dynamodb —
crossplane-provider-aws-dynamodb-compat affected Wolfi crossplane-provider-aws-dynamodb-compat —
crossplane-provider-aws-dynamodb-compat affected Chainguard crossplane-provider-aws-dynamodb-compat —
crossplane-provider-aws-ec2 affected Chainguard crossplane-provider-aws-ec2 —
crossplane-provider-aws-ec2 affected Wolfi crossplane-provider-aws-ec2 —
crossplane-provider-aws-ec2-compat affected Wolfi crossplane-provider-aws-ec2-compat —
crossplane-provider-aws-ec2-compat affected Chainguard crossplane-provider-aws-ec2-compat —
crossplane-provider-aws-eks affected Wolfi crossplane-provider-aws-eks —
crossplane-provider-aws-eks affected Chainguard crossplane-provider-aws-eks —
crossplane-provider-aws-eks-compat affected Wolfi crossplane-provider-aws-eks-compat —
crossplane-provider-aws-eks-compat affected Chainguard crossplane-provider-aws-eks-compat —
crossplane-provider-aws-elasticache affected Chainguard crossplane-provider-aws-elasticache —
crossplane-provider-aws-elasticache affected Wolfi crossplane-provider-aws-elasticache —
crossplane-provider-aws-elasticache-compat affected Chainguard crossplane-provider-aws-elasticache-compat —
crossplane-provider-aws-elasticache-compat affected Wolfi crossplane-provider-aws-elasticache-compat —
crossplane-provider-aws-family affected Chainguard crossplane-provider-aws-family —
crossplane-provider-aws-family affected Wolfi crossplane-provider-aws-family —
crossplane-provider-aws-firehose affected Wolfi crossplane-provider-aws-firehose —
crossplane-provider-aws-firehose affected Chainguard crossplane-provider-aws-firehose —
crossplane-provider-aws-firehose-compat affected Chainguard crossplane-provider-aws-firehose-compat —
crossplane-provider-aws-firehose-compat affected Wolfi crossplane-provider-aws-firehose-compat —
crossplane-provider-aws-iam affected Chainguard crossplane-provider-aws-iam —
crossplane-provider-aws-iam affected Wolfi crossplane-provider-aws-iam —
crossplane-provider-aws-iam-compat affected Wolfi crossplane-provider-aws-iam-compat —
crossplane-provider-aws-iam-compat affected Chainguard crossplane-provider-aws-iam-compat —
crossplane-provider-aws-kinesis affected Chainguard crossplane-provider-aws-kinesis —
crossplane-provider-aws-kinesis affected Wolfi crossplane-provider-aws-kinesis —
crossplane-provider-aws-kinesis-compat affected Wolfi crossplane-provider-aws-kinesis-compat —
crossplane-provider-aws-kinesis-compat affected Chainguard crossplane-provider-aws-kinesis-compat —
crossplane-provider-aws-kms affected Wolfi crossplane-provider-aws-kms —
crossplane-provider-aws-kms affected Chainguard crossplane-provider-aws-kms —
crossplane-provider-aws-kms-compat affected Chainguard crossplane-provider-aws-kms-compat —
crossplane-provider-aws-kms-compat affected Wolfi crossplane-provider-aws-kms-compat —
crossplane-provider-aws-lambda affected Chainguard crossplane-provider-aws-lambda —
crossplane-provider-aws-lambda affected Wolfi crossplane-provider-aws-lambda —
crossplane-provider-aws-lambda-compat affected Wolfi crossplane-provider-aws-lambda-compat —
crossplane-provider-aws-lambda-compat affected Chainguard crossplane-provider-aws-lambda-compat —
crossplane-provider-aws-memorydb affected Chainguard crossplane-provider-aws-memorydb —
crossplane-provider-aws-memorydb affected Wolfi crossplane-provider-aws-memorydb —
crossplane-provider-aws-memorydb-compat affected Chainguard crossplane-provider-aws-memorydb-compat —
crossplane-provider-aws-memorydb-compat affected Wolfi crossplane-provider-aws-memorydb-compat —
crossplane-provider-aws-rds affected Chainguard crossplane-provider-aws-rds —
crossplane-provider-aws-rds affected Wolfi crossplane-provider-aws-rds —
crossplane-provider-aws-rds-compat affected Chainguard crossplane-provider-aws-rds-compat —
crossplane-provider-aws-rds-compat affected Wolfi crossplane-provider-aws-rds-compat —
crossplane-provider-aws-route53 affected Wolfi crossplane-provider-aws-route53 —
crossplane-provider-aws-route53 affected Chainguard crossplane-provider-aws-route53 —
crossplane-provider-aws-route53-compat affected Wolfi crossplane-provider-aws-route53-compat —
crossplane-provider-aws-route53-compat affected Chainguard crossplane-provider-aws-route53-compat —
crossplane-provider-aws-s3 affected Chainguard crossplane-provider-aws-s3 —
crossplane-provider-aws-s3 affected Wolfi crossplane-provider-aws-s3 —
crossplane-provider-aws-s3-compat affected Wolfi crossplane-provider-aws-s3-compat —
crossplane-provider-aws-s3-compat affected Chainguard crossplane-provider-aws-s3-compat —
crossplane-provider-aws-sns affected Wolfi crossplane-provider-aws-sns —
crossplane-provider-aws-sns affected Chainguard crossplane-provider-aws-sns —
crossplane-provider-aws-sns-compat affected Wolfi crossplane-provider-aws-sns-compat —
crossplane-provider-aws-sns-compat affected Chainguard crossplane-provider-aws-sns-compat —
crossplane-provider-aws-sqs affected Chainguard crossplane-provider-aws-sqs —
crossplane-provider-aws-sqs affected Wolfi crossplane-provider-aws-sqs —
crossplane-provider-aws-sqs-compat affected Wolfi crossplane-provider-aws-sqs-compat —
crossplane-provider-aws-sqs-compat affected Chainguard crossplane-provider-aws-sqs-compat —
crossplane-provider-azure affected Wolfi crossplane-provider-azure —
crossplane-provider-azure affected Chainguard crossplane-provider-azure —
crossplane-provider-azure-authorization affected Chainguard crossplane-provider-azure-authorization —
crossplane-provider-azure-authorization affected Wolfi crossplane-provider-azure-authorization —
crossplane-provider-azure-authorization-compat affected Chainguard crossplane-provider-azure-authorization-compat —
crossplane-provider-azure-authorization-compat affected Wolfi crossplane-provider-azure-authorization-compat —
crossplane-provider-azure-family affected Wolfi crossplane-provider-azure-family —
crossplane-provider-azure-family affected Chainguard crossplane-provider-azure-family —
crossplane-provider-azure-managedidentity affected Chainguard crossplane-provider-azure-managedidentity —
crossplane-provider-azure-managedidentity affected Wolfi crossplane-provider-azure-managedidentity —
crossplane-provider-azure-managedidentity-compat affected Wolfi crossplane-provider-azure-managedidentity-compat —
crossplane-provider-azure-managedidentity-compat affected Chainguard crossplane-provider-azure-managedidentity-compat —
crossplane-provider-azure-sql affected Chainguard crossplane-provider-azure-sql —
crossplane-provider-azure-sql affected Wolfi crossplane-provider-azure-sql —
crossplane-provider-azure-sql-compat affected Chainguard crossplane-provider-azure-sql-compat —
crossplane-provider-azure-sql-compat affected Wolfi crossplane-provider-azure-sql-compat —
crossplane-provider-azure-storage affected Chainguard crossplane-provider-azure-storage —
crossplane-provider-azure-storage affected Wolfi crossplane-provider-azure-storage —
crossplane-provider-azure-storage-compat affected Chainguard crossplane-provider-azure-storage-compat —
crossplane-provider-azure-storage-compat affected Wolfi crossplane-provider-azure-storage-compat —
crossplane-provider-family-aws affected Chainguard crossplane-provider-family-aws —
crossplane-provider-family-aws affected Wolfi crossplane-provider-family-aws —
crossplane-provider-family-aws-compat affected Chainguard crossplane-provider-family-aws-compat —
crossplane-provider-family-aws-compat affected Wolfi crossplane-provider-family-aws-compat —
crossplane-provider-family-azure affected Chainguard crossplane-provider-family-azure —
crossplane-provider-family-azure affected Wolfi crossplane-provider-family-azure —
crossplane-provider-family-azure-compat affected Wolfi crossplane-provider-family-azure-compat —
crossplane-provider-family-azure-compat affected Chainguard crossplane-provider-family-azure-compat —
crossplane-provider-gcp affected Wolfi crossplane-provider-gcp —
crossplane-provider-gcp affected Chainguard crossplane-provider-gcp —
ctr affected Chainguard ctr —
ctr affected Wolfi ctr —
cue affected Wolfi cue —
cue affected Chainguard cue —
cue-bash-completion-fips affected Chainguard cue-bash-completion-fips —
cue-fips affected Chainguard cue-fips —
cue-fips-bash-completion affected Chainguard cue-fips-bash-completion —
cue-fips-fish-completion affected Chainguard cue-fips-fish-completion —
cue-fips-zsh-completion affected Chainguard cue-fips-zsh-completion —
cue-fish-completion-fips affected Chainguard cue-fish-completion-fips —
cue-zsh-completion-fips affected Chainguard cue-zsh-completion-fips —
dagdotdev affected Wolfi dagdotdev —
dagdotdev affected Chainguard dagdotdev —
dask-gateway affected Chainguard dask-gateway —
dask-gateway affected Wolfi dask-gateway —
datadog-agent affected Chainguard datadog-agent —
datadog-agent affected Wolfi datadog-agent —
datadog-agent-core-integrations affected Chainguard datadog-agent-core-integrations —
datadog-agent-core-integrations affected Wolfi datadog-agent-core-integrations —
datadog-agent-core-integrations-fips affected Chainguard datadog-agent-core-integrations-fips —
datadog-agent-fakeintake affected Wolfi datadog-agent-fakeintake —
datadog-agent-fakeintake affected Chainguard datadog-agent-fakeintake —
datadog-agent-fakeintake-fips affected Chainguard datadog-agent-fakeintake-fips —
datadog-agent-fips affected Chainguard datadog-agent-fips —
datadog-agent-jmx affected Wolfi datadog-agent-jmx —
datadog-agent-jmx affected Chainguard datadog-agent-jmx —
datadog-agent-jmx-fips affected Chainguard datadog-agent-jmx-fips —
datadog-agent-oci-compat affected Chainguard datadog-agent-oci-compat —
datadog-agent-oci-compat affected Wolfi datadog-agent-oci-compat —
datadog-agent-oci-compat-fips affected Chainguard datadog-agent-oci-compat-fips —
datadog-agent-s6-overlay affected Wolfi datadog-agent-s6-overlay —
datadog-agent-s6-overlay affected Chainguard datadog-agent-s6-overlay —
datadog-agent-s6-overlay-fips affected Chainguard datadog-agent-s6-overlay-fips —
datadog-cluster-agent affected Chainguard datadog-cluster-agent —
datadog-cluster-agent affected Wolfi datadog-cluster-agent —
datadog-cluster-agent-fips affected Chainguard datadog-cluster-agent-fips —
datadog-cluster-agent-oci-compat affected Wolfi datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat affected Chainguard datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat-fips affected Chainguard datadog-cluster-agent-oci-compat-fips —
dataplaneapi affected Chainguard dataplaneapi —
dataplaneapi affected Wolfi dataplaneapi —
delve affected Chainguard delve —
delve affected Wolfi delve —
dex affected Wolfi dex —
dex affected Chainguard dex —
dex-fips affected Chainguard dex-fips —
dex-k8s-authenticator affected Chainguard dex-k8s-authenticator —
dgraph affected Chainguard dgraph —
dgraph affected Wolfi dgraph —
direnv affected Wolfi direnv —
direnv affected Chainguard direnv —
dive affected Chainguard dive —
dive affected Wolfi dive —
docker-cli affected Chainguard docker-cli —
docker-cli affected Wolfi docker-cli —
docker-compose affected Chainguard docker-compose —
docker-compose affected Wolfi docker-compose —
docker-credential-acr-env affected Wolfi docker-credential-acr-env —
docker-credential-acr-env affected Chainguard docker-credential-acr-env —
docker-credential-cgr affected Chainguard docker-credential-cgr —
docker-credential-ecr-login affected Wolfi docker-credential-ecr-login —
docker-credential-ecr-login affected Chainguard docker-credential-ecr-login —
docker-credential-gcr affected Wolfi docker-credential-gcr —
docker-credential-gcr affected Chainguard docker-credential-gcr —
dockerize affected Chainguard dockerize —
dockerize affected Wolfi dockerize —
dockerize-fips affected Chainguard dockerize-fips —
dogstatsd affected Chainguard dogstatsd —
dogstatsd affected Wolfi dogstatsd —
doppler-kubernetes-operator affected Wolfi doppler-kubernetes-operator —
doppler-kubernetes-operator affected Chainguard doppler-kubernetes-operator —
dynamic-localpv-provisioner affected Chainguard dynamic-localpv-provisioner —
dynamic-localpv-provisioner affected Wolfi dynamic-localpv-provisioner —
dynamic-localpv-provisioner-fips affected Chainguard dynamic-localpv-provisioner-fips —
eksctl affected Wolfi eksctl —
eksctl affected Chainguard eksctl —
envoy-ratelimit affected Wolfi envoy-ratelimit —
envoy-ratelimit affected Chainguard envoy-ratelimit —
envoy-ratelimit-fips affected Chainguard envoy-ratelimit-fips —
envoy-ratelimit-fips-compat affected Chainguard envoy-ratelimit-fips-compat —
esbuild affected Wolfi esbuild —
esbuild affected Chainguard esbuild —
etcd-3.4 affected Chainguard etcd-3.4 —
etcd-3.5 affected Chainguard etcd-3.5 —
etcd-3.5 affected Wolfi etcd-3.5 —
etcd-3.5-bitnami-compat affected Wolfi etcd-3.5-bitnami-compat —
etcd-3.5-bitnami-compat affected Chainguard etcd-3.5-bitnami-compat —
etcd-3.5-iamguarded-compat affected Chainguard etcd-3.5-iamguarded-compat —
etcd-3.5-iamguarded-compat affected Wolfi etcd-3.5-iamguarded-compat —
etcd-fips-3.4 affected Chainguard etcd-fips-3.4 —
etcd-fips-3.5 affected Chainguard etcd-fips-3.5 —
external-dns affected Wolfi external-dns —
external-dns affected Chainguard external-dns —
external-dns-fips affected Chainguard external-dns-fips —
external-dns-fips-bitnami-compat affected Chainguard external-dns-fips-bitnami-compat —
external-dns-fips-iamguarded-compat affected Chainguard external-dns-fips-iamguarded-compat —
external-secrets-0.7 affected Chainguard external-secrets-0.7 —
external-secrets-fips affected Chainguard external-secrets-fips —
external-secrets-operator affected Chainguard external-secrets-operator —
external-secrets-operator affected Wolfi external-secrets-operator —
falco affected Chainguard falco —
falco affected Wolfi falco —
falcoctl affected Wolfi falcoctl —
falcoctl affected Chainguard falcoctl —
falcoctl-fips affected Chainguard falcoctl-fips —
falcoctl-fips-0.4 affected Chainguard falcoctl-fips-0.4 —
falcosidekick affected Wolfi falcosidekick —
falcosidekick affected Chainguard falcosidekick —
falcosidekick-fips affected Chainguard falcosidekick-fips —
ferretdb affected Chainguard ferretdb —
ferretdb affected Wolfi ferretdb —
filebeat affected Wolfi filebeat —
filebeat affected Chainguard filebeat —
filebeat-fips affected Chainguard filebeat-fips —
flannel affected Wolfi flannel —
flannel affected Chainguard flannel —
flannel-cni-plugin affected Chainguard flannel-cni-plugin —
flannel-cni-plugin affected Wolfi flannel-cni-plugin —
flannel-compat affected Wolfi flannel-compat —
flannel-compat affected Chainguard flannel-compat —
flux affected Chainguard flux —
flux affected Wolfi flux —
fluxcd-source-controller-bitnami-compat affected Chainguard fluxcd-source-controller-bitnami-compat —
fluxcd-source-controller-bitnami-compat affected Wolfi fluxcd-source-controller-bitnami-compat —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller-bitnami-compat affected Chainguard flux-helm-controller-bitnami-compat —
flux-helm-controller-bitnami-compat affected Wolfi flux-helm-controller-bitnami-compat —
flux-helm-controller-iamguarded-compat affected Wolfi flux-helm-controller-iamguarded-compat —
flux-helm-controller-iamguarded-compat affected Chainguard flux-helm-controller-iamguarded-compat —
flux-image-automation-controller affected Chainguard flux-image-automation-controller —
flux-image-automation-controller affected Wolfi flux-image-automation-controller —
flux-image-reflector-controller affected Wolfi flux-image-reflector-controller —
flux-image-reflector-controller affected Chainguard flux-image-reflector-controller —
flux-kustomize-controller affected Wolfi flux-kustomize-controller —
flux-kustomize-controller affected Chainguard flux-kustomize-controller —
flux-notification-controller affected Chainguard flux-notification-controller —
flux-notification-controller affected Wolfi flux-notification-controller —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller-bitnami-compat affected Chainguard flux-source-controller-bitnami-compat —
flux-source-controller-bitnami-compat affected Wolfi flux-source-controller-bitnami-compat —
flux-source-controller-iamguarded-compat affected Wolfi flux-source-controller-iamguarded-compat —
flux-source-controller-iamguarded-compat affected Chainguard flux-source-controller-iamguarded-compat —
flyte affected Chainguard flyte —
flyte affected Wolfi flyte —
fq affected Chainguard fq —
fq affected Wolfi fq —
frp affected Wolfi frp —
frp affected Chainguard frp —
fulcio affected Wolfi fulcio —
fulcio affected Chainguard fulcio —
fulcio-fips affected Chainguard fulcio-fips —
fuse-overlayfs-snapshotter affected Wolfi fuse-overlayfs-snapshotter —
fuse-overlayfs-snapshotter affected Chainguard fuse-overlayfs-snapshotter —
gatekeeper-3.13 affected Chainguard gatekeeper-3.13 —
gatekeeper-3.13 affected Wolfi gatekeeper-3.13 —
gatekeeper-3.13-compat affected Wolfi gatekeeper-3.13-compat —
gatekeeper-3.13-compat affected Chainguard gatekeeper-3.13-compat —
gatekeeper-3.14 affected Wolfi gatekeeper-3.14 —
gatekeeper-3.14 affected Chainguard gatekeeper-3.14 —
gatekeeper-fips-3.13 affected Chainguard gatekeeper-fips-3.13 —
gatekeeper-fips-3.13-compat affected Chainguard gatekeeper-fips-3.13-compat —
gatekeeper-fips-3.14 affected Chainguard gatekeeper-fips-3.14 —
gatekeeper-fips-3.14-compat affected Chainguard gatekeeper-fips-3.14-compat —
gatekeeper-fips-3.15 affected Chainguard gatekeeper-fips-3.15 —
gatekeeper-fips-3.15-compat affected Chainguard gatekeeper-fips-3.15-compat —
gcsfuse affected Chainguard gcsfuse —
gcsfuse affected Wolfi gcsfuse —
gh affected Chainguard gh —
gh affected Wolfi gh —
ghaudit affected Chainguard ghaudit —
ghaudit affected Wolfi ghaudit —
gh-doc affected Wolfi gh-doc —
gh-doc affected Chainguard gh-doc —
gitlab-kas affected Wolfi gitlab-kas —
gitlab-kas affected Chainguard gitlab-kas —
gitlab-pages affected Chainguard gitlab-pages —
gitlab-pages affected Wolfi gitlab-pages —
gitlab-rails-ee-17.3 affected Chainguard gitlab-rails-ee-17.3 —
gitlab-rails-ee-assets-17.3 affected Chainguard gitlab-rails-ee-assets-17.3 —
gitlab-rails-ee-assets-fips-17.2 affected Chainguard gitlab-rails-ee-assets-fips-17.2 —
gitlab-rails-ee-doc-17.3 affected Chainguard gitlab-rails-ee-doc-17.3 —
gitlab-rails-ee-doc-fips-17.2 affected Chainguard gitlab-rails-ee-doc-fips-17.2 —
gitlab-rails-ee-fips-17.2 affected Chainguard gitlab-rails-ee-fips-17.2 —
gitlab-runner affected Wolfi gitlab-runner —
gitlab-runner affected Chainguard gitlab-runner —
gitleaks affected Chainguard gitleaks —
gitleaks affected Wolfi gitleaks —
git-lfs affected Wolfi git-lfs —
git-lfs affected Chainguard git-lfs —
git-lfs-config affected Wolfi git-lfs-config —
git-lfs-config affected Chainguard git-lfs-config —
gitness affected Chainguard gitness —
gitness affected Wolfi gitness —
gitsign affected Chainguard gitsign —
gitsign affected Wolfi gitsign —
gitsign-config affected Wolfi gitsign-config —
gitsign-config affected Chainguard gitsign-config —
gitsign-credential-cache affected Chainguard gitsign-credential-cache —
gitsign-credential-cache affected Wolfi gitsign-credential-cache —
gke-gcloud-auth-plugin affected Chainguard gke-gcloud-auth-plugin —
gke-gcloud-auth-plugin affected Wolfi gke-gcloud-auth-plugin —
glab affected Wolfi glab —
glab affected Chainguard glab —
go-1.21 affected Chainguard go-1.21 —
go-1.21 affected Wolfi go-1.21 —
go-1.22 affected Chainguard go-1.22 —
go-1.22 affected Wolfi go-1.22 —
go-bindata affected Wolfi go-bindata —
go-bindata affected Chainguard go-bindata —
gobump affected Chainguard gobump —
gobump affected Wolfi gobump —
gobuster affected Chainguard gobuster —
gobuster affected Wolfi gobuster —
go-fips-1.21 affected Chainguard go-fips-1.21 —
go-fips-1.21 affected Wolfi go-fips-1.21 —
go-ipfs-fips affected Chainguard go-ipfs-fips —
golangci-lint affected Chainguard golangci-lint —
golangci-lint affected Wolfi golangci-lint —
go-licenses affected Wolfi go-licenses —
go-licenses affected Chainguard go-licenses —
go-md2man affected Wolfi go-md2man —
go-md2man affected Chainguard go-md2man —
gomplate affected Wolfi gomplate —
gomplate affected Chainguard gomplate —
goreleaser affected Chainguard goreleaser —
goreleaser affected Wolfi goreleaser —
goreleaser-1.18 affected Wolfi goreleaser-1.18 —
goreleaser-1.18 affected Chainguard goreleaser-1.18 —
gostatsd affected Chainguard gostatsd —
gostatsd affected Wolfi gostatsd —
gosu affected Chainguard gosu —
gosu affected Wolfi gosu —
gotenberg affected Chainguard gotenberg —
govulncheck affected Wolfi govulncheck —
govulncheck affected Chainguard govulncheck —
gptscript affected Chainguard gptscript —
gptscript affected Wolfi gptscript —
gpu-operator affected Chainguard gpu-operator —
grafana-10.3 affected Chainguard grafana-10.3 —
grafana-10.4 affected Wolfi grafana-10.4 —
grafana-10.4 affected Chainguard grafana-10.4 —
grafana-8 affected Chainguard grafana-8 —
grafana-8-oci-compat affected Chainguard grafana-8-oci-compat —
grafana-9 affected Chainguard grafana-9 —
grafana-9-fips affected Chainguard grafana-9-fips —
grafana-9-fips-oci-compat affected Chainguard grafana-9-fips-oci-compat —
grafana-agent-operator affected Chainguard grafana-agent-operator —
grafana-agent-operator affected Wolfi grafana-agent-operator —
grafana-fips-10.3 affected Chainguard grafana-fips-10.3 —
grafana-fips-10.4 affected Chainguard grafana-fips-10.4 —
grafana-fips-10.4-oci-compat affected Chainguard grafana-fips-10.4-oci-compat —
grafana-operator affected Wolfi grafana-operator —
grafana-operator affected Chainguard grafana-operator —
grafana-operator-bitnami-compat affected Chainguard grafana-operator-bitnami-compat —
grafana-operator-bitnami-compat affected Wolfi grafana-operator-bitnami-compat —
grafana-operator-fips affected Chainguard grafana-operator-fips —
grafana-operator-fips-bitnami-compat affected Chainguard grafana-operator-fips-bitnami-compat —
grpc-health-probe affected Chainguard grpc-health-probe —
grpc-health-probe affected Wolfi grpc-health-probe —
grpcurl affected Wolfi grpcurl —
grpcurl affected Chainguard grpcurl —
guac affected Chainguard guac —
guac affected Wolfi guac —
haproxy-ingress affected Wolfi haproxy-ingress —
haproxy-ingress affected Chainguard haproxy-ingress —
harbor-2.10 affected Wolfi harbor-2.10 —
harbor-2.10 affected Chainguard harbor-2.10 —
harbor-2.10-exporter affected Chainguard harbor-2.10-exporter —
harbor-2.10-jobservice affected Wolfi harbor-2.10-jobservice —
harbor-2.10-jobservice affected Chainguard harbor-2.10-jobservice —
harbor-2.10-portal affected Wolfi harbor-2.10-portal —
harbor-2.10-portal affected Chainguard harbor-2.10-portal —
harbor-2.10-portal-nginx-config affected Chainguard harbor-2.10-portal-nginx-config —
harbor-2.10-portal-nginx-config affected Wolfi harbor-2.10-portal-nginx-config —
harbor-2.10-redis-compat affected Chainguard harbor-2.10-redis-compat —
harbor-2.10-registryctl affected Wolfi harbor-2.10-registryctl —
harbor-2.10-registryctl affected Chainguard harbor-2.10-registryctl —
harbor-2.8 affected Chainguard harbor-2.8 —
harbor-2.9 affected Chainguard harbor-2.9 —
harbor-cli affected Wolfi harbor-cli —
harbor-cli affected Chainguard harbor-cli —
harbor-fips-2.10 affected Chainguard harbor-fips-2.10 —
harbor-fips-2.10-db affected Chainguard harbor-fips-2.10-db —
harbor-fips-2.10-exporter affected Chainguard harbor-fips-2.10-exporter —
harbor-fips-2.10-jobservice affected Chainguard harbor-fips-2.10-jobservice —
harbor-fips-2.10-portal affected Chainguard harbor-fips-2.10-portal —
harbor-fips-2.10-redis-compat affected Chainguard harbor-fips-2.10-redis-compat —
harbor-fips-2.10-registryctl affected Chainguard harbor-fips-2.10-registryctl —
harbor-fips-2.8 affected Chainguard harbor-fips-2.8 —
harbor-fips-2.8-db affected Chainguard harbor-fips-2.8-db —
harbor-fips-2.8-jobservice affected Chainguard harbor-fips-2.8-jobservice —
harbor-fips-2.8-portal affected Chainguard harbor-fips-2.8-portal —
harbor-fips-2.8-registryctl affected Chainguard harbor-fips-2.8-registryctl —
harbor-fips-2.9 affected Chainguard harbor-fips-2.9 —
harbor-fips-2.9-db affected Chainguard harbor-fips-2.9-db —
harbor-fips-2.9-jobservice affected Chainguard harbor-fips-2.9-jobservice —
harbor-fips-2.9-portal affected Chainguard harbor-fips-2.9-portal —
harbor-fips-2.9-registryctl affected Chainguard harbor-fips-2.9-registryctl —
harbor-registry affected Wolfi harbor-registry —
harbor-registry affected Chainguard harbor-registry —
harbor-registry-fips affected Chainguard harbor-registry-fips —
harbor-scanner-trivy affected Chainguard harbor-scanner-trivy —
harbor-scanner-trivy affected Wolfi harbor-scanner-trivy —
harbor-scanner-trivy-fips affected Chainguard harbor-scanner-trivy-fips —
hcloud affected Wolfi hcloud —
hcloud affected Chainguard hcloud —
health-checker-0.8 affected Chainguard health-checker-0.8 —
health-checker-0.8 affected Wolfi health-checker-0.8 —
hello-world-golang affected Wolfi hello-world-golang —
hello-world-golang affected Chainguard hello-world-golang —
helm affected Wolfi helm —
helm affected Chainguard helm —
helm-3 affected Wolfi helm-3 —
helm-3 affected Chainguard helm-3 —
helm-4 affected Wolfi helm-4 —
helm-4 affected Chainguard helm-4 —
helm-fips affected Chainguard helm-fips —
helm-fips-3 affected Chainguard helm-fips-3 —
helm-fips-4 affected Chainguard helm-fips-4 —
helm-operator affected Chainguard helm-operator —
helm-operator affected Wolfi helm-operator —
helm-operator-compat affected Wolfi helm-operator-compat —
helm-operator-compat affected Chainguard helm-operator-compat —
helm-operator-fips affected Chainguard helm-operator-fips —
helm-operator-fips-compat affected Chainguard helm-operator-fips-compat —
helm-push affected Wolfi helm-push —
helm-push affected Chainguard helm-push —
hey affected Chainguard hey —
hey affected Wolfi hey —
http-echo affected Wolfi http-echo —
http-echo affected Chainguard http-echo —
hubble affected Wolfi hubble —
hubble affected Chainguard hubble —
hubble-compat affected Chainguard hubble-compat —
hubble-compat affected Wolfi hubble-compat —
hubble-fips affected Chainguard hubble-fips —
hubble-fips-compat affected Chainguard hubble-fips-compat —
hubble-ui affected Chainguard hubble-ui —
hubble-ui affected Wolfi hubble-ui —
hubble-ui-backend affected Wolfi hubble-ui-backend —
hubble-ui-backend affected Chainguard hubble-ui-backend —
hubble-ui-backend-fips affected Chainguard hubble-ui-backend-fips —
hugo affected Wolfi hugo —
hugo affected Chainguard hugo —
hugo-extended affected Wolfi hugo-extended —
hugo-extended affected Chainguard hugo-extended —
influx affected Chainguard influx —
influx affected Wolfi influx —
influxd affected Chainguard influxd —
influxd affected Wolfi influxd —
influxd-bitnami-compat affected Chainguard influxd-bitnami-compat —
influxd-bitnami-compat affected Wolfi influxd-bitnami-compat —
ingress-nginx-controller affected Wolfi ingress-nginx-controller —
ingress-nginx-controller affected Chainguard ingress-nginx-controller —
ingress-nginx-controller-fips affected Chainguard ingress-nginx-controller-fips —
ipfs affected Wolfi ipfs —
ipfs affected Chainguard ipfs —
ip-masq-agent affected Wolfi ip-masq-agent —
ip-masq-agent affected Chainguard ip-masq-agent —
istio-cni-1.19 affected Chainguard istio-cni-1.19 —
istio-cni-1.19 affected Wolfi istio-cni-1.19 —
istio-cni-1.19-compat affected Chainguard istio-cni-1.19-compat —
istio-cni-1.19-compat affected Wolfi istio-cni-1.19-compat —
istio-cni-1.20 affected Wolfi istio-cni-1.20 —
istio-cni-1.20 affected Chainguard istio-cni-1.20 —
istio-cni-1.20-compat affected Wolfi istio-cni-1.20-compat —
istio-cni-1.20-compat affected Chainguard istio-cni-1.20-compat —
istio-cni-1.21 affected Wolfi istio-cni-1.21 —
istio-cni-1.21 affected Chainguard istio-cni-1.21 —
istio-cni-fips-1.19 affected Chainguard istio-cni-fips-1.19 —
istio-fips-1.20 affected Chainguard istio-fips-1.20 —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-1.19 affected Wolfi istio-install-cni-1.19 —
istio-install-cni-1.19 affected Chainguard istio-install-cni-1.19 —
istio-install-cni-1.19-compat affected Chainguard istio-install-cni-1.19-compat —
istio-install-cni-1.19-compat affected Wolfi istio-install-cni-1.19-compat —
istio-install-cni-1.20 affected Wolfi istio-install-cni-1.20 —
istio-install-cni-1.20 affected Chainguard istio-install-cni-1.20 —
istio-install-cni-1.20-compat affected Chainguard istio-install-cni-1.20-compat —
istio-install-cni-1.20-compat affected Wolfi istio-install-cni-1.20-compat —
istio-operator-1.19 affected Chainguard istio-operator-1.19 —
istio-operator-1.19 affected Wolfi istio-operator-1.19 —
istio-operator-1.20 affected Wolfi istio-operator-1.20 —
istio-operator-1.20 affected Chainguard istio-operator-1.20 —
istio-operator-1.21 affected Wolfi istio-operator-1.21 —
istio-operator-1.21 affected Chainguard istio-operator-1.21 —
istio-operator-fips-1.19 affected Chainguard istio-operator-fips-1.19 —
istio-pilot-agent-1.19 affected Wolfi istio-pilot-agent-1.19 —
istio-pilot-agent-1.19 affected Chainguard istio-pilot-agent-1.19 —
istio-pilot-agent-1.19-compat affected Chainguard istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.19-compat affected Wolfi istio-pilot-agent-1.19-compat —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-fips-1.19 affected Chainguard istio-pilot-agent-fips-1.19 —
istio-pilot-discovery-1.19 affected Wolfi istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19 affected Chainguard istio-pilot-discovery-1.19 —
istio-pilot-discovery-1.19-compat affected Wolfi istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.19-compat affected Chainguard istio-pilot-discovery-1.19-compat —
istio-pilot-discovery-1.20 affected Wolfi istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20 affected Chainguard istio-pilot-discovery-1.20 —
istio-pilot-discovery-1.20-compat affected Chainguard istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-1.20-compat affected Wolfi istio-pilot-discovery-1.20-compat —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-fips-1.19 affected Chainguard istio-pilot-discovery-fips-1.19 —
jsonnet-bundler affected Chainguard jsonnet-bundler —
k3d affected Chainguard k3d —
k3d affected Wolfi k3d —
k3s affected Wolfi k3s —
k3s affected Chainguard k3s —
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
k8sgpt-operator affected Wolfi k8sgpt-operator —
k8sgpt-operator affected Chainguard k8sgpt-operator —
k8sgpt-operator-compat affected Wolfi k8sgpt-operator-compat —
k8sgpt-operator-compat affected Chainguard k8sgpt-operator-compat —
k8ssandra-operator affected Chainguard k8ssandra-operator —
k8ssandra-operator affected Wolfi k8ssandra-operator —
k8ssandra-operator-compat affected Chainguard k8ssandra-operator-compat —
k8ssandra-operator-compat affected Wolfi k8ssandra-operator-compat —
k8ssandra-operator-fips affected Chainguard k8ssandra-operator-fips —
k8ssandra-operator-fips-compat affected Chainguard k8ssandra-operator-fips-compat —
k9s affected Wolfi k9s —
k9s affected Chainguard k9s —
kaf affected Wolfi kaf —
kaf affected Chainguard kaf —
kafka_exporter affected Chainguard kafka_exporter —
kafka_exporter affected Wolfi kafka_exporter —
kaniko affected Chainguard kaniko —
kaniko affected Wolfi kaniko —
kargo affected Wolfi kargo —
kargo affected Chainguard kargo —
karpenter affected Chainguard karpenter —
karpenter affected Wolfi karpenter —
karpenter-0.23 affected Chainguard karpenter-0.23 —
karpenter-0.35 affected Chainguard karpenter-0.35 —
karpenter-fips-0.35 affected Chainguard karpenter-fips-0.35 —
keda-2.13 affected Chainguard keda-2.13 —
keda-2.13 affected Wolfi keda-2.13 —
keda-adapter-fips affected Chainguard keda-adapter-fips —
keda-admission-webhooks-fips affected Chainguard keda-admission-webhooks-fips —
keda-fips affected Chainguard keda-fips —
keda-metrics-apiserver-fips affected Chainguard keda-metrics-apiserver-fips —
kiam affected Chainguard kiam —
kind affected Wolfi kind —
kind affected Chainguard kind —
kine affected Wolfi kine —
kine affected Chainguard kine —
ko affected Chainguard ko —
ko affected Wolfi ko —
ko-fips affected Wolfi ko-fips —
ko-fips affected Chainguard ko-fips —
kor affected Wolfi kor —
kor affected Chainguard kor —
kpt affected Wolfi kpt —
kpt affected Chainguard kpt —
kubeadm-1.27 affected Chainguard kubeadm-1.27 —
kubeadm-1.27 affected Wolfi kubeadm-1.27 —
kubeadm-1.27-default affected Wolfi kubeadm-1.27-default —
kubeadm-1.27-default affected Chainguard kubeadm-1.27-default —
kubeadm-bootstrap-controller affected Wolfi kubeadm-bootstrap-controller —
kubeadm-bootstrap-controller affected Chainguard kubeadm-bootstrap-controller —
kubeadm-controlplane-controller affected Wolfi kubeadm-controlplane-controller —
kubeadm-controlplane-controller affected Chainguard kubeadm-controlplane-controller —
kube-apiserver-1.27 affected Chainguard kube-apiserver-1.27 —
kube-apiserver-1.27 affected Wolfi kube-apiserver-1.27 —
kube-apiserver-1.27-default affected Chainguard kube-apiserver-1.27-default —
kube-apiserver-1.27-default affected Wolfi kube-apiserver-1.27-default —
kube-bench affected Chainguard kube-bench —
kube-bench affected Wolfi kube-bench —
kube-bench-configs affected Wolfi kube-bench-configs —
kube-bench-configs affected Chainguard kube-bench-configs —
kube-bench-configs-fips affected Chainguard kube-bench-configs-fips —
kube-bench-fips affected Chainguard kube-bench-fips —
kubebuilder affected Wolfi kubebuilder —
kubebuilder affected Chainguard kubebuilder —
kubecolor affected Wolfi kubecolor —
kubecolor affected Chainguard kubecolor —
kube-controller-manager-1.27 affected Wolfi kube-controller-manager-1.27 —
kube-controller-manager-1.27 affected Chainguard kube-controller-manager-1.27 —
kube-controller-manager-1.27-default affected Chainguard kube-controller-manager-1.27-default —
kube-controller-manager-1.27-default affected Wolfi kube-controller-manager-1.27-default —
kubectl-1.27 affected Chainguard kubectl-1.27 —
kubectl-1.27 affected Wolfi kubectl-1.27 —
kubectl-1.27-default affected Wolfi kubectl-1.27-default —
kubectl-1.27-default affected Chainguard kubectl-1.27-default —
kubectl-bash-completion-1.27 affected Chainguard kubectl-bash-completion-1.27 —
kubectl-bash-completion-1.27 affected Wolfi kubectl-bash-completion-1.27 —
kubeflow affected Wolfi kubeflow —
kubeflow affected Chainguard kubeflow —
kubeflow-access-management affected Wolfi kubeflow-access-management —
kubeflow-access-management affected Chainguard kubeflow-access-management —
kubeflow-access-management-compat affected Chainguard kubeflow-access-management-compat —
kubeflow-access-management-compat affected Wolfi kubeflow-access-management-compat —
kubeflow-access-management-fips affected Chainguard kubeflow-access-management-fips —
kubeflow-access-management-fips-compat affected Chainguard kubeflow-access-management-fips-compat —
kubeflow-admission-webhook affected Wolfi kubeflow-admission-webhook —
kubeflow-admission-webhook affected Chainguard kubeflow-admission-webhook —
kubeflow-admission-webhook-compat affected Wolfi kubeflow-admission-webhook-compat —
kubeflow-admission-webhook-compat affected Chainguard kubeflow-admission-webhook-compat —
kubeflow-admission-webhook-fips affected Chainguard kubeflow-admission-webhook-fips —
kubeflow-admission-webhook-fips-compat affected Chainguard kubeflow-admission-webhook-fips-compat —
kubeflow-fips affected Chainguard kubeflow-fips —
kubeflow-katib affected Wolfi kubeflow-katib —
kubeflow-katib affected Chainguard kubeflow-katib —
kubeflow-notebook-controller affected Chainguard kubeflow-notebook-controller —
kubeflow-notebook-controller affected Wolfi kubeflow-notebook-controller —
kubeflow-notebook-controller-compat affected Wolfi kubeflow-notebook-controller-compat —
kubeflow-notebook-controller-compat affected Chainguard kubeflow-notebook-controller-compat —
kubeflow-notebook-controller-fips affected Chainguard kubeflow-notebook-controller-fips —
kubeflow-notebook-controller-fips-compat affected Chainguard kubeflow-notebook-controller-fips-compat —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-profile-controller affected Wolfi kubeflow-profile-controller —
kubeflow-profile-controller affected Chainguard kubeflow-profile-controller —
kubeflow-profile-controller-compat affected Chainguard kubeflow-profile-controller-compat —
kubeflow-profile-controller-compat affected Wolfi kubeflow-profile-controller-compat —
kubeflow-profile-controller-fips affected Chainguard kubeflow-profile-controller-fips —
kubeflow-profile-controller-fips-compat affected Chainguard kubeflow-profile-controller-fips-compat —
kubeflow-pvcviewer-controller affected Chainguard kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller affected Wolfi kubeflow-pvcviewer-controller —
kubeflow-pvcviewer-controller-compat affected Chainguard kubeflow-pvcviewer-controller-compat —
kubeflow-pvcviewer-controller-compat affected Wolfi kubeflow-pvcviewer-controller-compat —
kubeflow-pvcviewer-controller-fips affected Chainguard kubeflow-pvcviewer-controller-fips —
kubeflow-pvcviewer-controller-fips-compat affected Chainguard kubeflow-pvcviewer-controller-fips-compat —
kubeflow-tensorboard-controller affected Wolfi kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller affected Chainguard kubeflow-tensorboard-controller —
kubeflow-tensorboard-controller-compat affected Wolfi kubeflow-tensorboard-controller-compat —
kubeflow-tensorboard-controller-compat affected Chainguard kubeflow-tensorboard-controller-compat —
kubeflow-tensorboard-controller-fips affected Chainguard kubeflow-tensorboard-controller-fips —
kubeflow-tensorboard-controller-fips-compat affected Chainguard kubeflow-tensorboard-controller-fips-compat —
kube-fluentd-operator affected Wolfi kube-fluentd-operator —
kube-fluentd-operator affected Chainguard kube-fluentd-operator —
kube-fluentd-operator-compat affected Chainguard kube-fluentd-operator-compat —
kube-fluentd-operator-compat affected Wolfi kube-fluentd-operator-compat —
kube-fluentd-operator-default-config affected Wolfi kube-fluentd-operator-default-config —
kube-fluentd-operator-default-config affected Chainguard kube-fluentd-operator-default-config —
kube-fluentd-operator-oci-entrypoint affected Chainguard kube-fluentd-operator-oci-entrypoint —
kube-fluentd-operator-oci-entrypoint affected Wolfi kube-fluentd-operator-oci-entrypoint —
kubelet-1.27 affected Chainguard kubelet-1.27 —
kubelet-1.27 affected Wolfi kubelet-1.27 —
kubelet-1.27-default affected Chainguard kubelet-1.27-default —
kubelet-1.27-default affected Wolfi kubelet-1.27-default —
kube-logging-logging-operator-3.17 affected Chainguard kube-logging-logging-operator-3.17 —
kube-logging-logging-operator-4.1 affected Chainguard kube-logging-logging-operator-4.1 —
kube-logging-operator affected Chainguard kube-logging-operator —
kube-logging-operator affected Wolfi kube-logging-operator —
kube-oidc-proxy affected Chainguard kube-oidc-proxy —
kube-proxy-1.27 affected Chainguard kube-proxy-1.27 —
kube-proxy-1.27 affected Wolfi kube-proxy-1.27 —
kube-proxy-1.27-default affected Chainguard kube-proxy-1.27-default —
kube-proxy-1.27-default affected Wolfi kube-proxy-1.27-default —
kuberay-operator affected Chainguard kuberay-operator —
kuberay-operator affected Wolfi kuberay-operator —
kube-rbac-proxy affected Chainguard kube-rbac-proxy —
kube-rbac-proxy affected Wolfi kube-rbac-proxy —
kubernetes-1.27 affected Wolfi kubernetes-1.27 —
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
kubernetes-1.27-default affected Wolfi kubernetes-1.27-default —
kubernetes-1.27-default affected Chainguard kubernetes-1.27-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28 affected Wolfi kubernetes-1.28 —
kubernetes-1.29 affected Wolfi kubernetes-1.29 —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-csi-driver-hostpath affected Wolfi kubernetes-csi-driver-hostpath —
kubernetes-csi-driver-hostpath affected Chainguard kubernetes-csi-driver-hostpath —
kubernetes-csi-external-attacher-4.3 affected Wolfi kubernetes-csi-external-attacher-4.3 —
kubernetes-csi-external-attacher-4.3 affected Chainguard kubernetes-csi-external-attacher-4.3 —
kubernetes-csi-external-attacher-4.4 affected Wolfi kubernetes-csi-external-attacher-4.4 —
kubernetes-csi-external-attacher-4.4 affected Chainguard kubernetes-csi-external-attacher-4.4 —
kubernetes-csi-external-attacher-fips-4.3 affected Chainguard kubernetes-csi-external-attacher-fips-4.3 —
kubernetes-csi-external-attacher-fips-4.4 affected Chainguard kubernetes-csi-external-attacher-fips-4.4 —
kubernetes-csi-external-provisioner affected Wolfi kubernetes-csi-external-provisioner —
kubernetes-csi-external-provisioner affected Chainguard kubernetes-csi-external-provisioner —
kubernetes-csi-external-resizer affected Chainguard kubernetes-csi-external-resizer —
kubernetes-csi-external-resizer affected Wolfi kubernetes-csi-external-resizer —
kubernetes-csi-external-resizer-1.10 affected Wolfi kubernetes-csi-external-resizer-1.10 —
kubernetes-csi-external-resizer-1.10 affected Chainguard kubernetes-csi-external-resizer-1.10 —
kubernetes-csi-external-resizer-1.8 affected Chainguard kubernetes-csi-external-resizer-1.8 —
kubernetes-csi-external-resizer-1.9 affected Chainguard kubernetes-csi-external-resizer-1.9 —
kubernetes-csi-external-resizer-fips-1.10 affected Chainguard kubernetes-csi-external-resizer-fips-1.10 —
kubernetes-csi-external-resizer-fips-1.8 affected Chainguard kubernetes-csi-external-resizer-fips-1.8 —
kubernetes-csi-external-resizer-fips-1.9 affected Chainguard kubernetes-csi-external-resizer-fips-1.9 —
kubernetes-csi-external-snapshot-controller affected Wolfi kubernetes-csi-external-snapshot-controller —
kubernetes-csi-external-snapshot-controller affected Chainguard kubernetes-csi-external-snapshot-controller —
kubernetes-csi-external-snapshotter affected Wolfi kubernetes-csi-external-snapshotter —
kubernetes-csi-external-snapshotter affected Chainguard kubernetes-csi-external-snapshotter —
kubernetes-csi-external-snapshotter-6.0 affected Chainguard kubernetes-csi-external-snapshotter-6.0 —
kubernetes-csi-external-snapshotter-6.0-snapshot-controller affected Chainguard kubernetes-csi-external-snapshotter-6.0-snapshot-controller —
kubernetes-csi-external-snapshotter-6.0-snapshot-validation-webhook affected Chainguard kubernetes-csi-external-snapshotter-6.0-snapshot-validation-webhook —
kubernetes-csi-external-snapshot-validation-webhook affected Wolfi kubernetes-csi-external-snapshot-validation-webhook —
kubernetes-csi-external-snapshot-validation-webhook affected Chainguard kubernetes-csi-external-snapshot-validation-webhook —
kubernetes-csi-livenessprobe affected Chainguard kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe affected Wolfi kubernetes-csi-livenessprobe —
kubernetes-csi-livenessprobe-2.10 affected Chainguard kubernetes-csi-livenessprobe-2.10 —
kubernetes-csi-livenessprobe-fips affected Chainguard kubernetes-csi-livenessprobe-fips —
kubernetes-csi-livenessprobe-fips-2.10 affected Chainguard kubernetes-csi-livenessprobe-fips-2.10 —
kubernetes-csi-node-driver-registrar-2.10 affected Chainguard kubernetes-csi-node-driver-registrar-2.10 —
kubernetes-csi-node-driver-registrar-2.10 affected Wolfi kubernetes-csi-node-driver-registrar-2.10 —
kubernetes-csi-node-driver-registrar-2.6 affected Chainguard kubernetes-csi-node-driver-registrar-2.6 —
kubernetes-csi-node-driver-registrar-2.7 affected Chainguard kubernetes-csi-node-driver-registrar-2.7 —
kubernetes-csi-node-driver-registrar-2.8 affected Chainguard kubernetes-csi-node-driver-registrar-2.8 —
kubernetes-csi-node-driver-registrar-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9 affected Wolfi kubernetes-csi-node-driver-registrar-2.9 —
kubernetes-csi-node-driver-registrar-2.9-compat affected Chainguard kubernetes-csi-node-driver-registrar-2.9-compat —
kubernetes-csi-node-driver-registrar-2.9-compat affected Wolfi kubernetes-csi-node-driver-registrar-2.9-compat —
kubernetes-csi-node-driver-registrar-fips-2.10 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.10 —
kubernetes-csi-node-driver-registrar-fips-2.10-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.10-compat —
kubernetes-csi-node-driver-registrar-fips-2.6 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.6 —
kubernetes-csi-node-driver-registrar-fips-2.6-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.6-compat —
kubernetes-csi-node-driver-registrar-fips-2.7 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.7 —
kubernetes-csi-node-driver-registrar-fips-2.7-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.7-compat —
kubernetes-csi-node-driver-registrar-fips-2.8 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8 —
kubernetes-csi-node-driver-registrar-fips-2.8-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.8-compat —
kubernetes-csi-node-driver-registrar-fips-2.9 affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.9 —
kubernetes-csi-node-driver-registrar-fips-2.9-compat affected Chainguard kubernetes-csi-node-driver-registrar-fips-2.9-compat —
kubernetes-dashboard affected Wolfi kubernetes-dashboard —
kubernetes-dashboard affected Chainguard kubernetes-dashboard —
kubernetes-dashboard-fips affected Chainguard kubernetes-dashboard-fips —
kubernetes-dashboard-metrics-scraper affected Chainguard kubernetes-dashboard-metrics-scraper —
kubernetes-dashboard-metrics-scraper affected Wolfi kubernetes-dashboard-metrics-scraper —
kubernetes-dashboard-metrics-scraper-fips affected Chainguard kubernetes-dashboard-metrics-scraper-fips —
kubernetes-dns-node-cache affected Chainguard kubernetes-dns-node-cache —
kubernetes-dns-node-cache affected Wolfi kubernetes-dns-node-cache —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
kubernetes-event-exporter affected Chainguard kubernetes-event-exporter —
kubernetes-event-exporter affected Wolfi kubernetes-event-exporter —
kubernetes-event-exporter-bitnami-compat affected Wolfi kubernetes-event-exporter-bitnami-compat —
kubernetes-event-exporter-bitnami-compat affected Chainguard kubernetes-event-exporter-bitnami-compat —
kubernetes-event-exporter-iamguarded-compat affected Wolfi kubernetes-event-exporter-iamguarded-compat —
kubernetes-event-exporter-iamguarded-compat affected Chainguard kubernetes-event-exporter-iamguarded-compat —
kubernetes-fips-1.27 affected Chainguard kubernetes-fips-1.27 —
kubernetes-fips-1.28 affected Chainguard kubernetes-fips-1.28 —
kubernetes-fips-1.29 affected Chainguard kubernetes-fips-1.29 —
kubernetes-ingress-defaultbackend affected Wolfi kubernetes-ingress-defaultbackend —
kubernetes-ingress-defaultbackend affected Chainguard kubernetes-ingress-defaultbackend —
kubescape affected Chainguard kubescape —
kubescape affected Wolfi kubescape —
kube-scheduler-1.27 affected Wolfi kube-scheduler-1.27 —
kube-scheduler-1.27 affected Chainguard kube-scheduler-1.27 —
kube-scheduler-1.27-default affected Wolfi kube-scheduler-1.27-default —
kube-scheduler-1.27-default affected Chainguard kube-scheduler-1.27-default —
kube-state-metrics affected Chainguard kube-state-metrics —
kube-state-metrics affected Wolfi kube-state-metrics —
kube-state-metrics-2.2.0 affected Chainguard kube-state-metrics-2.2.0 —
kube-state-metrics-2.6 affected Chainguard kube-state-metrics-2.6 —
kube-state-metrics-fips affected Chainguard kube-state-metrics-fips —
kube-state-metrics-fips-iamguarded-compat affected Chainguard kube-state-metrics-fips-iamguarded-compat —
kubevela affected Chainguard kubevela —
kubevela affected Wolfi kubevela —
kubevela-vela-cli affected Wolfi kubevela-vela-cli —
kubevela-vela-cli affected Chainguard kubevela-vela-cli —
kubevela-vela-core affected Wolfi kubevela-vela-core —
kubevela-vela-core affected Chainguard kubevela-vela-core —
kubevela-vela-core-compat affected Wolfi kubevela-vela-core-compat —
kubevela-vela-core-compat affected Chainguard kubevela-vela-core-compat —
kubewatch affected Chainguard kubewatch —
kubewatch affected Wolfi kubewatch —
kuma-coredns affected Wolfi kuma-coredns —
kuma-coredns affected Chainguard kuma-coredns —
kustomize affected Wolfi kustomize —
kustomize affected Chainguard kustomize —
kwok affected Chainguard kwok —
kwok affected Wolfi kwok —
kwokctl affected Wolfi kwokctl —
kwokctl affected Chainguard kwokctl —
kyverno affected Wolfi kyverno —
kyverno affected Chainguard kyverno —
kyverno-background-controller affected Wolfi kyverno-background-controller —
kyverno-background-controller affected Chainguard kyverno-background-controller —
kyverno-background-controller-fips affected Chainguard kyverno-background-controller-fips —
kyverno-cleanup-controller affected Chainguard kyverno-cleanup-controller —
kyverno-cleanup-controller affected Wolfi kyverno-cleanup-controller —
kyverno-cleanup-controller-fips affected Chainguard kyverno-cleanup-controller-fips —
kyverno-cli affected Chainguard kyverno-cli —
kyverno-cli affected Wolfi kyverno-cli —
kyverno-cli-fips affected Chainguard kyverno-cli-fips —
kyverno-fips affected Chainguard kyverno-fips —
kyverno-init-container affected Wolfi kyverno-init-container —
kyverno-init-container affected Chainguard kyverno-init-container —
kyverno-init-container-fips affected Chainguard kyverno-init-container-fips —
kyverno-policy-reporter affected Chainguard kyverno-policy-reporter —
kyverno-policy-reporter affected Wolfi kyverno-policy-reporter —
kyverno-policy-reporter-2.11 affected Chainguard kyverno-policy-reporter-2.11 —
kyverno-policy-reporter-kyverno-plugin affected Wolfi kyverno-policy-reporter-kyverno-plugin —
kyverno-policy-reporter-kyverno-plugin affected Chainguard kyverno-policy-reporter-kyverno-plugin —
kyverno-policy-reporter-kyverno-plugin-1.5 affected Chainguard kyverno-policy-reporter-kyverno-plugin-1.5 —
kyverno-policy-reporter-kyverno-plugin-compat affected Chainguard kyverno-policy-reporter-kyverno-plugin-compat —
kyverno-policy-reporter-kyverno-plugin-compat affected Wolfi kyverno-policy-reporter-kyverno-plugin-compat —
kyverno-policy-reporter-ui affected Wolfi kyverno-policy-reporter-ui —
kyverno-policy-reporter-ui affected Chainguard kyverno-policy-reporter-ui —
kyverno-policy-reporter-ui-1.7 affected Chainguard kyverno-policy-reporter-ui-1.7 —
kyverno-reports-controller affected Wolfi kyverno-reports-controller —
kyverno-reports-controller affected Chainguard kyverno-reports-controller —
kyverno-reports-controller-fips affected Chainguard kyverno-reports-controller-fips —
lazygit affected Wolfi lazygit —
lazygit affected Chainguard lazygit —
litefs affected Wolfi litefs —
litefs affected Chainguard litefs —
litestream affected Chainguard litestream —
litestream affected Wolfi litestream —
local-path-provisioner affected Wolfi local-path-provisioner —
local-path-provisioner affected Chainguard local-path-provisioner —
localstack affected Chainguard localstack —
localstack-compat affected Chainguard localstack-compat —
log-counter-0.8 affected Chainguard log-counter-0.8 —
log-counter-0.8 affected Wolfi log-counter-0.8 —
logstash-exporter affected Chainguard logstash-exporter —
logstash-exporter affected Wolfi logstash-exporter —
logstash-jre-bcfips affected Chainguard logstash-jre-bcfips —
logstash-jre-bcfips-compat affected Chainguard logstash-jre-bcfips-compat —
logstash-jre-bcfips-env2yaml affected Chainguard logstash-jre-bcfips-env2yaml —
logstash-jre-bcfips-with-output-opensearch affected Chainguard logstash-jre-bcfips-with-output-opensearch —
loki affected Chainguard loki —
loki affected Wolfi loki —
mage affected Wolfi mage —
mage affected Chainguard mage —
mc affected Wolfi mc —
mc affected Chainguard mc —
mc-fips affected Chainguard mc-fips —
melange affected Wolfi melange —
melange affected Chainguard melange —
melange-microvm-init affected Chainguard melange-microvm-init —
melange-microvm-init affected Wolfi melange-microvm-init —
memcached-exporter affected Wolfi memcached-exporter —
memcached-exporter affected Chainguard memcached-exporter —
memcached-exporter-bitnami-compat affected Chainguard memcached-exporter-bitnami-compat —
memcached-exporter-bitnami-compat affected Wolfi memcached-exporter-bitnami-compat —
memcached-exporter-iamguarded-compat affected Wolfi memcached-exporter-iamguarded-compat —
memcached-exporter-iamguarded-compat affected Chainguard memcached-exporter-iamguarded-compat —
metacontroller affected Wolfi metacontroller —
metacontroller affected Chainguard metacontroller —
metallb affected Wolfi metallb —
metallb affected Chainguard metallb —
metallb-controller-compat-fips affected Chainguard metallb-controller-compat-fips —
metallb-controller-fips affected Chainguard metallb-controller-fips —
metallb-cp-tool-compat-fips affected Chainguard metallb-cp-tool-compat-fips —
metallb-cp-tool-fips affected Chainguard metallb-cp-tool-fips —
metallb-fips affected Chainguard metallb-fips —
metallb-frr-compat-fips affected Chainguard metallb-frr-compat-fips —
metallb-frr-fips affected Chainguard metallb-frr-fips —
metallb-speaker-compat-fips affected Chainguard metallb-speaker-compat-fips —
metallb-speaker-fips affected Chainguard metallb-speaker-fips —
metrics-server affected Wolfi metrics-server —
metrics-server affected Chainguard metrics-server —
metrics-server-fips affected Chainguard metrics-server-fips —
metrics-server-fips-bitnami-compat affected Chainguard metrics-server-fips-bitnami-compat —
minify affected Chainguard minify —
minify affected Wolfi minify —
minio affected Chainguard minio —
minio affected Wolfi minio —
minio-fips affected Chainguard minio-fips —
mkcert affected Chainguard mkcert —
mkcert affected Wolfi mkcert —
mods affected Wolfi mods —
mods affected Chainguard mods —
mongo-tools affected Chainguard mongo-tools —
mongo-tools affected Wolfi mongo-tools —
multus-cni affected Chainguard multus-cni —
multus-cni affected Wolfi multus-cni —
multus-cni-fips affected Chainguard multus-cni-fips —
nats affected Chainguard nats —
nats affected Wolfi nats —
nats-server affected Chainguard nats-server —
nats-server affected Wolfi nats-server —
nerdctl affected Wolfi nerdctl —
nerdctl affected Chainguard nerdctl —
neuvector-scanner affected Chainguard neuvector-scanner —
neuvector-scanner affected Wolfi neuvector-scanner —
neuvector-scanner-monitor affected Wolfi neuvector-scanner-monitor —
neuvector-scanner-monitor affected Chainguard neuvector-scanner-monitor —
neuvector-scanner-task affected Chainguard neuvector-scanner-task —
neuvector-scanner-task affected Wolfi neuvector-scanner-task —
neuvector-sigstore-interface affected Wolfi neuvector-sigstore-interface —
neuvector-sigstore-interface affected Chainguard neuvector-sigstore-interface —
newrelic-fluent-bit-output affected Wolfi newrelic-fluent-bit-output —
newrelic-fluent-bit-output affected Chainguard newrelic-fluent-bit-output —
newrelic-infra-operator affected Chainguard newrelic-infra-operator —
newrelic-infra-operator affected Wolfi newrelic-infra-operator —
newrelic-infrastructure-agent affected Chainguard newrelic-infrastructure-agent —
newrelic-infrastructure-agent affected Wolfi newrelic-infrastructure-agent —
newrelic-infrastructure-agent-1.43 affected Chainguard newrelic-infrastructure-agent-1.43 —
newrelic-nri-kube-events affected Chainguard newrelic-nri-kube-events —
newrelic-nri-kube-events affected Wolfi newrelic-nri-kube-events —
newrelic-nri-kube-events-1.9 affected Chainguard newrelic-nri-kube-events-1.9 —
newrelic-nri-statsd affected Chainguard newrelic-nri-statsd —
newrelic-nri-statsd affected Wolfi newrelic-nri-statsd —
newrelic-prometheus-configurator affected Chainguard newrelic-prometheus-configurator —
newrelic-prometheus-configurator affected Wolfi newrelic-prometheus-configurator —
nfs-subdir-external-provisioner affected Wolfi nfs-subdir-external-provisioner —
nfs-subdir-external-provisioner affected Chainguard nfs-subdir-external-provisioner —
nfs-subdir-external-provisioner-fips affected Chainguard nfs-subdir-external-provisioner-fips —
node-feature-discovery-0.14 affected Chainguard node-feature-discovery-0.14 —
node-feature-discovery-0.15 affected Chainguard node-feature-discovery-0.15 —
node-feature-discovery-0.15 affected Wolfi node-feature-discovery-0.15 —
node-problem-detector-0.8 affected Chainguard node-problem-detector-0.8 —
node-problem-detector-0.8 affected Wolfi node-problem-detector-0.8 —
node-problem-detector-0.8-compat affected Chainguard node-problem-detector-0.8-compat —
node-problem-detector-0.8-compat affected Wolfi node-problem-detector-0.8-compat —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
nri-apache affected Chainguard nri-apache —
nri-apache affected Wolfi nri-apache —
nri-cassandra affected Chainguard nri-cassandra —
nri-cassandra affected Wolfi nri-cassandra —
nri-consul affected Wolfi nri-consul —
nri-consul affected Chainguard nri-consul —
nri-couchbase affected Wolfi nri-couchbase —
nri-couchbase affected Chainguard nri-couchbase —
nri-discovery-kubernetes affected Chainguard nri-discovery-kubernetes —
nri-discovery-kubernetes affected Wolfi nri-discovery-kubernetes —
nri-elasticsearch affected Chainguard nri-elasticsearch —
nri-elasticsearch affected Wolfi nri-elasticsearch —
nri-f5 affected Chainguard nri-f5 —
nri-f5 affected Wolfi nri-f5 —
nri-haproxy affected Wolfi nri-haproxy —
nri-haproxy affected Chainguard nri-haproxy —
nri-jmx affected Chainguard nri-jmx —
nri-jmx affected Wolfi nri-jmx —
nri-kafka affected Chainguard nri-kafka —
nri-kafka affected Wolfi nri-kafka —
nri-kafka-compat affected Wolfi nri-kafka-compat —
nri-kafka-compat affected Chainguard nri-kafka-compat —
nri-kafka-jdk11 affected Wolfi nri-kafka-jdk11 —
nri-kafka-jdk11 affected Chainguard nri-kafka-jdk11 —
nri-kubernetes affected Chainguard nri-kubernetes —
nri-kubernetes affected Wolfi nri-kubernetes —
nri-kubernetes-2.13 affected Chainguard nri-kubernetes-2.13 —
nri-memcached affected Chainguard nri-memcached —
nri-memcached affected Wolfi nri-memcached —
nri-mongodb affected Wolfi nri-mongodb —
nri-mongodb affected Chainguard nri-mongodb —
nri-mssql affected Wolfi nri-mssql —
nri-mssql affected Chainguard nri-mssql —
nri-mysql affected Chainguard nri-mysql —
nri-mysql affected Wolfi nri-mysql —
nri-nagios affected Chainguard nri-nagios —
nri-nagios affected Wolfi nri-nagios —
nri-nginx affected Chainguard nri-nginx —
nri-nginx affected Wolfi nri-nginx —
nri-postgresql affected Wolfi nri-postgresql —
nri-postgresql affected Chainguard nri-postgresql —
nri-prometheus affected Chainguard nri-prometheus —
nri-prometheus affected Wolfi nri-prometheus —
nri-rabbitmq affected Wolfi nri-rabbitmq —
nri-rabbitmq affected Chainguard nri-rabbitmq —
nri-redis affected Wolfi nri-redis —
nri-redis affected Chainguard nri-redis —
nsc affected Wolfi nsc —
nsc affected Chainguard nsc —
nuclei affected Chainguard nuclei —
nuclei affected Wolfi nuclei —
oauth2-proxy affected Chainguard oauth2-proxy —
oauth2-proxy affected Wolfi oauth2-proxy —
oauth2-proxy-iamguarded-compat affected Wolfi oauth2-proxy-iamguarded-compat —
oauth2-proxy-iamguarded-compat affected Chainguard oauth2-proxy-iamguarded-compat —
ollama affected Wolfi ollama —
ollama affected Chainguard ollama —
ollama-cpu affected Wolfi ollama-cpu —
ollama-cpu affected Chainguard ollama-cpu —
opentelemetry-collector-contrib affected Chainguard opentelemetry-collector-contrib —
opentelemetry-collector-contrib affected Wolfi opentelemetry-collector-contrib —
opentelemetry-collector-contrib-fips affected Chainguard opentelemetry-collector-contrib-fips —
opentofu affected Wolfi opentofu —
opentofu affected Chainguard opentofu —
opentofu-1.6 affected Chainguard opentofu-1.6 —
opentofu-1.6-compat affected Chainguard opentofu-1.6-compat —
opentofu-1.6-local-provider-config affected Chainguard opentofu-1.6-local-provider-config —
opentofu-compat affected Wolfi opentofu-compat —
opentofu-compat affected Chainguard opentofu-compat —
opentofu-local-provider-config affected Wolfi opentofu-local-provider-config —
opentofu-local-provider-config affected Chainguard opentofu-local-provider-config —
oras affected Chainguard oras —
oras affected Wolfi oras —
osv-scanner affected Wolfi osv-scanner —
osv-scanner affected Chainguard osv-scanner —
paranoia affected Wolfi paranoia —
paranoia affected Chainguard paranoia —
petname affected Chainguard petname —
petname affected Wolfi petname —
php-fpm_exporter affected Chainguard php-fpm_exporter —
php-fpm_exporter affected Wolfi php-fpm_exporter —
policy-controller affected Chainguard policy-controller —
policy-controller affected Wolfi policy-controller —
pombump affected Chainguard pombump —
pombump affected Wolfi pombump —
postgres-operator affected Wolfi postgres-operator —
postgres-operator affected Chainguard postgres-operator —
postgres-operator-compat affected Wolfi postgres-operator-compat —
postgres-operator-compat affected Chainguard postgres-operator-compat —
postgres-operator-fips affected Chainguard postgres-operator-fips —
prometheus-2.51 affected Chainguard prometheus-2.51 —
prometheus-2.51 affected Wolfi prometheus-2.51 —
prometheus-adapter affected Wolfi prometheus-adapter —
prometheus-adapter affected Chainguard prometheus-adapter —
prometheus-adapter-0.10 affected Chainguard prometheus-adapter-0.10 —
prometheus-adapter-fips affected Chainguard prometheus-adapter-fips —
prometheus-adapter-fips-0.10 affected Chainguard prometheus-adapter-fips-0.10 —
prometheus-admission-webhook affected Chainguard prometheus-admission-webhook —
prometheus-admission-webhook affected Wolfi prometheus-admission-webhook —
prometheus-admission-webhook-compat affected Wolfi prometheus-admission-webhook-compat —
prometheus-admission-webhook-compat affected Chainguard prometheus-admission-webhook-compat —
prometheus-admission-webhook-fips affected Chainguard prometheus-admission-webhook-fips —
prometheus-alertmanager affected Wolfi prometheus-alertmanager —
prometheus-alertmanager affected Chainguard prometheus-alertmanager —
prometheus-alertmanager-fips affected Chainguard prometheus-alertmanager-fips —
prometheus-alertmanager-fips-iamguarded-compat affected Chainguard prometheus-alertmanager-fips-iamguarded-compat —
prometheus-beat-exporter affected Chainguard prometheus-beat-exporter —
prometheus-beat-exporter affected Wolfi prometheus-beat-exporter —
prometheus-bind-exporter affected Chainguard prometheus-bind-exporter —
prometheus-bind-exporter affected Wolfi prometheus-bind-exporter —
prometheus-blackbox-exporter affected Chainguard prometheus-blackbox-exporter —
prometheus-blackbox-exporter affected Wolfi prometheus-blackbox-exporter —
prometheus-config-reloader affected Wolfi prometheus-config-reloader —
prometheus-config-reloader affected Chainguard prometheus-config-reloader —
prometheus-config-reloader-fips affected Chainguard prometheus-config-reloader-fips —
prometheus-config-reloader-oci-entrypoint-compat affected Chainguard prometheus-config-reloader-oci-entrypoint-compat —
prometheus-config-reloader-oci-entrypoint-compat affected Wolfi prometheus-config-reloader-oci-entrypoint-compat —
prometheus-config-reloader-oci-entrypoint-compat-fips affected Chainguard prometheus-config-reloader-oci-entrypoint-compat-fips —
prometheus-elasticsearch-exporter affected Wolfi prometheus-elasticsearch-exporter —
prometheus-elasticsearch-exporter affected Chainguard prometheus-elasticsearch-exporter —
prometheus-elasticsearch-exporter-bitnami-compat affected Wolfi prometheus-elasticsearch-exporter-bitnami-compat —
prometheus-elasticsearch-exporter-bitnami-compat affected Chainguard prometheus-elasticsearch-exporter-bitnami-compat —
prometheus-elasticsearch-exporter-fips affected Chainguard prometheus-elasticsearch-exporter-fips —
prometheus-elasticsearch-exporter-iamguarded-compat affected Chainguard prometheus-elasticsearch-exporter-iamguarded-compat —
prometheus-fips affected Chainguard prometheus-fips —
prometheus-fips-2.45 affected Chainguard prometheus-fips-2.45 —
prometheus-mongodb-exporter affected Wolfi prometheus-mongodb-exporter —
prometheus-mongodb-exporter affected Chainguard prometheus-mongodb-exporter —
prometheus-mongodb-exporter-0.37 affected Chainguard prometheus-mongodb-exporter-0.37 —
prometheus-mongodb-exporter-fips affected Chainguard prometheus-mongodb-exporter-fips —
prometheus-mongodb-exporter-fips-0.37 affected Chainguard prometheus-mongodb-exporter-fips-0.37 —
prometheus-mysqld-exporter affected Chainguard prometheus-mysqld-exporter —
prometheus-mysqld-exporter affected Wolfi prometheus-mysqld-exporter —
prometheus-mysqld-exporter-bitnami-compat affected Wolfi prometheus-mysqld-exporter-bitnami-compat —
prometheus-mysqld-exporter-bitnami-compat affected Chainguard prometheus-mysqld-exporter-bitnami-compat —
prometheus-mysqld-exporter-iamguarded-compat affected Chainguard prometheus-mysqld-exporter-iamguarded-compat —
prometheus-nats-exporter affected Chainguard prometheus-nats-exporter —
prometheus-nats-exporter affected Wolfi prometheus-nats-exporter —
prometheus-node-exporter affected Wolfi prometheus-node-exporter —
prometheus-node-exporter affected Chainguard prometheus-node-exporter —
prometheus-node-exporter-1.4 affected Chainguard prometheus-node-exporter-1.4 —
prometheus-node-exporter-1.5 affected Chainguard prometheus-node-exporter-1.5 —
prometheus-node-exporter-fips affected Chainguard prometheus-node-exporter-fips —
prometheus-node-exporter-fips-iamguarded-compat affected Chainguard prometheus-node-exporter-fips-iamguarded-compat —
prometheus-operator affected Chainguard prometheus-operator —
prometheus-operator affected Wolfi prometheus-operator —
prometheus-operator-bitnami-compat affected Wolfi prometheus-operator-bitnami-compat —
prometheus-operator-bitnami-compat affected Chainguard prometheus-operator-bitnami-compat —
prometheus-operator-fips affected Chainguard prometheus-operator-fips —
prometheus-operator-fips-iamguarded-compat affected Chainguard prometheus-operator-fips-iamguarded-compat —
prometheus-operator-iamguarded-compat affected Wolfi prometheus-operator-iamguarded-compat —
prometheus-operator-iamguarded-compat affected Chainguard prometheus-operator-iamguarded-compat —
prometheus-postgres-exporter affected Wolfi prometheus-postgres-exporter —
prometheus-postgres-exporter affected Chainguard prometheus-postgres-exporter —
prometheus-postgres-exporter-0.10 affected Chainguard prometheus-postgres-exporter-0.10 —
prometheus-postgres-exporter-0.13 affected Chainguard prometheus-postgres-exporter-0.13 —
prometheus-postgres-exporter-fips affected Chainguard prometheus-postgres-exporter-fips —
prometheus-postgres-exporter-fips-iamguarded-compat affected Chainguard prometheus-postgres-exporter-fips-iamguarded-compat —
prometheus-pushgateway affected Wolfi prometheus-pushgateway —
prometheus-pushgateway affected Chainguard prometheus-pushgateway —
prometheus-pushgateway-1.4 affected Chainguard prometheus-pushgateway-1.4 —
prometheus-pushgateway-fips affected Chainguard prometheus-pushgateway-fips —
prometheus-pushgateway-fips-1.4 affected Chainguard prometheus-pushgateway-fips-1.4 —
prometheus-redis-exporter affected Chainguard prometheus-redis-exporter —
prometheus-redis-exporter affected Wolfi prometheus-redis-exporter —
prometheus-redis-exporter-fips-1.44 affected Chainguard prometheus-redis-exporter-fips-1.44 —
prometheus-stackdriver-exporter affected Wolfi prometheus-stackdriver-exporter —
prometheus-stackdriver-exporter affected Chainguard prometheus-stackdriver-exporter —
prometheus-statsd-exporter affected Wolfi prometheus-statsd-exporter —
prometheus-statsd-exporter affected Chainguard prometheus-statsd-exporter —
prometheus-statsd-exporter-0.22 affected Chainguard prometheus-statsd-exporter-0.22 —
prometheus-statsd-exporter-fips affected Chainguard prometheus-statsd-exporter-fips —
prometheus-statsd-exporter-iamguarded-compat affected Chainguard prometheus-statsd-exporter-iamguarded-compat —
protoc-gen-go affected Wolfi protoc-gen-go —
protoc-gen-go affected Chainguard protoc-gen-go —
protoc-gen-go-grpc affected Chainguard protoc-gen-go-grpc —
protoc-gen-go-grpc affected Wolfi protoc-gen-go-grpc —
pulumi affected Chainguard pulumi —
pulumi affected Wolfi pulumi —
pulumi-kubernetes-operator affected Wolfi pulumi-kubernetes-operator —
pulumi-kubernetes-operator affected Chainguard pulumi-kubernetes-operator —
pulumi-language-dotnet affected Chainguard pulumi-language-dotnet —
pulumi-language-dotnet affected Wolfi pulumi-language-dotnet —
pulumi-language-java affected Chainguard pulumi-language-java —
pulumi-language-java affected Wolfi pulumi-language-java —
q affected Wolfi q —
q affected Chainguard q —
rabbitmq-cluster-operator affected Wolfi rabbitmq-cluster-operator —
rabbitmq-cluster-operator affected Chainguard rabbitmq-cluster-operator —
rabbitmq-messaging-topology-operator affected Chainguard rabbitmq-messaging-topology-operator —
rabbitmq-messaging-topology-operator affected Wolfi rabbitmq-messaging-topology-operator —
rabbitmq-messaging-topology-operator-bitnami-compat affected Chainguard rabbitmq-messaging-topology-operator-bitnami-compat —
rabbitmq-messaging-topology-operator-bitnami-compat affected Wolfi rabbitmq-messaging-topology-operator-bitnami-compat —
rabbitmq-messaging-topology-operator-compat affected Chainguard rabbitmq-messaging-topology-operator-compat —
rabbitmq-messaging-topology-operator-compat affected Wolfi rabbitmq-messaging-topology-operator-compat —
rabbitmq-messaging-topology-operator-iamguarded-compat affected Wolfi rabbitmq-messaging-topology-operator-iamguarded-compat —
rabbitmq-messaging-topology-operator-iamguarded-compat affected Chainguard rabbitmq-messaging-topology-operator-iamguarded-compat —
rclone affected Chainguard rclone —
rclone affected Wolfi rclone —
regclient affected Chainguard regclient —
regclient affected Wolfi regclient —
rekor affected Wolfi rekor —
rekor affected Chainguard rekor —
rekor-fips affected Chainguard rekor-fips —
rekor-fips-backfill-index affected Chainguard rekor-fips-backfill-index —
rekor-fips-backfill-redis affected Chainguard rekor-fips-backfill-redis —
rekor-fips-cli affected Chainguard rekor-fips-cli —
rekor-fips-server affected Chainguard rekor-fips-server —
render-template affected Wolfi render-template —
render-template affected Chainguard render-template —
request-1279 affected Chainguard request-1279 —
request-1279-1-12 affected Chainguard request-1279-1-12 —
request-1279-1-12-compat affected Chainguard request-1279-1-12-compat —
request-1279-compat affected Chainguard request-1279-compat —
restic affected Chainguard restic —
restic affected Wolfi restic —
restic-fips affected Chainguard restic-fips —
restic-fips-compat-fips affected Chainguard restic-fips-compat-fips —
rootlesskit affected Chainguard rootlesskit —
rootlesskit affected Wolfi rootlesskit —
rqlite affected Wolfi rqlite —
rqlite affected Chainguard rqlite —
runc affected Wolfi runc —
runc affected Chainguard runc —
s5cmd affected Wolfi s5cmd —
s5cmd affected Chainguard s5cmd —
sbomqs affected Chainguard sbomqs —
sbomqs affected Wolfi sbomqs —
sbom-scorecard affected Chainguard sbom-scorecard —
sbom-scorecard affected Wolfi sbom-scorecard —
scorecard affected Wolfi scorecard —
scorecard affected Chainguard scorecard —
secrets-store-csi-driver affected Chainguard secrets-store-csi-driver —
secrets-store-csi-driver affected Wolfi secrets-store-csi-driver —
secrets-store-csi-driver-provider-aws affected Chainguard secrets-store-csi-driver-provider-aws —
secrets-store-csi-driver-provider-aws affected Wolfi secrets-store-csi-driver-provider-aws —
secrets-store-csi-driver-provider-azure affected Wolfi secrets-store-csi-driver-provider-azure —
secrets-store-csi-driver-provider-azure affected Chainguard secrets-store-csi-driver-provider-azure —
secrets-store-csi-driver-provider-gcp affected Wolfi secrets-store-csi-driver-provider-gcp —
secrets-store-csi-driver-provider-gcp affected Chainguard secrets-store-csi-driver-provider-gcp —
shfmt affected Chainguard shfmt —
shfmt affected Wolfi shfmt —
sigstore-scaffolding affected Chainguard sigstore-scaffolding —
sigstore-scaffolding affected Wolfi sigstore-scaffolding —
sigstore-scaffolding-fips affected Chainguard sigstore-scaffolding-fips —
sigstore-scaffolding-fips-cloudsqlproxy affected Chainguard sigstore-scaffolding-fips-cloudsqlproxy —
sigstore-scaffolding-fips-ctlog-createctconfig affected Chainguard sigstore-scaffolding-fips-ctlog-createctconfig —
sigstore-scaffolding-fips-ctlog-managectroots affected Chainguard sigstore-scaffolding-fips-ctlog-managectroots —
sigstore-scaffolding-fips-ctlog-verifyfulcio affected Chainguard sigstore-scaffolding-fips-ctlog-verifyfulcio —
sigstore-scaffolding-fips-fulcio-createcerts affected Chainguard sigstore-scaffolding-fips-fulcio-createcerts —
sigstore-scaffolding-fips-getoidctoken affected Chainguard sigstore-scaffolding-fips-getoidctoken —
sigstore-scaffolding-fips-rekor-createsecret affected Chainguard sigstore-scaffolding-fips-rekor-createsecret —
sigstore-scaffolding-fips-trillian-createdb affected Chainguard sigstore-scaffolding-fips-trillian-createdb —
sigstore-scaffolding-fips-trillian-createtree affected Chainguard sigstore-scaffolding-fips-trillian-createtree —
sigstore-scaffolding-fips-trillian-updatetree affected Chainguard sigstore-scaffolding-fips-trillian-updatetree —
sigstore-scaffolding-fips-tsa-createcertchain affected Chainguard sigstore-scaffolding-fips-tsa-createcertchain —
sigstore-scaffolding-fips-tuf-createsecret affected Chainguard sigstore-scaffolding-fips-tuf-createsecret —
sigstore-scaffolding-fips-tuf-server affected Chainguard sigstore-scaffolding-fips-tuf-server —
skaffold affected Wolfi skaffold —
skaffold affected Chainguard skaffold —
skopeo affected Wolfi skopeo —
skopeo affected Chainguard skopeo —
slsa-verifier affected Wolfi slsa-verifier —
slsa-verifier affected Chainguard slsa-verifier —
smarter-device-manager affected Wolfi smarter-device-manager —
smarter-device-manager affected Chainguard smarter-device-manager —
smarter-device-manager-fips affected Chainguard smarter-device-manager-fips —
sonobuoy affected Chainguard sonobuoy —
sonobuoy affected Wolfi sonobuoy —
sonobuoy-compat affected Chainguard sonobuoy-compat —
sonobuoy-compat affected Wolfi sonobuoy-compat —
sops affected Chainguard sops —
sops affected Wolfi sops —
sparkctl affected Chainguard sparkctl —
sparkctl affected Wolfi sparkctl —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
speedtest-go affected Wolfi speedtest-go —
speedtest-go affected Chainguard speedtest-go —
spegel affected Chainguard spegel —
spegel affected Wolfi spegel —
spegel-compat affected Wolfi spegel-compat —
spegel-compat affected Chainguard spegel-compat —
spicedb affected Chainguard spicedb —
spicedb affected Wolfi spicedb —
spire-server affected Chainguard spire-server —
spire-server affected Wolfi spire-server —
spqr affected Wolfi spqr —
spqr affected Chainguard spqr —
src affected Chainguard src —
src affected Wolfi src —
src-fingerprint affected Chainguard src-fingerprint —
src-fingerprint affected Wolfi src-fingerprint —
stakater-reloader affected Chainguard stakater-reloader —
stakater-reloader affected Wolfi stakater-reloader —
stakater-reloader-0.0.119 affected Chainguard stakater-reloader-0.0.119 —
stakater-reloader-0.0.128 affected Chainguard stakater-reloader-0.0.128 —
stakater-reloader-compat affected Chainguard stakater-reloader-compat —
stakater-reloader-compat affected Wolfi stakater-reloader-compat —
step affected Chainguard step —
step affected Wolfi step —
step-ca affected Chainguard step-ca —
step-ca affected Wolfi step-ca —
step-ca-fips affected Chainguard step-ca-fips —
step-fips affected Chainguard step-fips —
step-issuer affected Chainguard step-issuer —
step-issuer affected Wolfi step-issuer —
step-issuer-compat affected Wolfi step-issuer-compat —
step-issuer-compat affected Chainguard step-issuer-compat —
step-issuer-fips affected Chainguard step-issuer-fips —
step-issuer-fips-compat affected Chainguard step-issuer-fips-compat —
stern affected Chainguard stern —
stern affected Wolfi stern —
supercronic affected Chainguard supercronic —
supercronic affected Wolfi supercronic —
swagger affected Chainguard swagger —
swagger affected Wolfi swagger —
tailscale affected Chainguard tailscale —
tailscale affected Wolfi tailscale —
tailscale-compat affected Wolfi tailscale-compat —
tailscale-compat affected Chainguard tailscale-compat —
task affected Chainguard task —
task affected Wolfi task —
tctl affected Wolfi tctl —
tctl affected Chainguard tctl —
tctl-authorization-plugin affected Wolfi tctl-authorization-plugin —
tctl-authorization-plugin affected Chainguard tctl-authorization-plugin —
tctl-authorization-plugin-compat affected Chainguard tctl-authorization-plugin-compat —
tctl-authorization-plugin-compat affected Wolfi tctl-authorization-plugin-compat —
tctl-authorization-plugin-fips affected Chainguard tctl-authorization-plugin-fips —
tctl-authorization-plugin-fips-compat affected Chainguard tctl-authorization-plugin-fips-compat —
tctl-compat affected Chainguard tctl-compat —
tctl-compat affected Wolfi tctl-compat —
tctl-fips affected Chainguard tctl-fips —
tctl-fips-compat affected Chainguard tctl-fips-compat —
tdbg-fips affected Chainguard tdbg-fips —
tdbg-fips-compat affected Chainguard tdbg-fips-compat —
tekton-chains affected Chainguard tekton-chains —
tekton-chains affected Wolfi tekton-chains —
tekton-chains-fips affected Chainguard tekton-chains-fips —
tekton-pipelines affected Wolfi tekton-pipelines —
tekton-pipelines affected Chainguard tekton-pipelines —
tekton-pipelines-controller-fips affected Chainguard tekton-pipelines-controller-fips —
tekton-pipelines-entrypoint-fips affected Chainguard tekton-pipelines-entrypoint-fips —
tekton-pipelines-events-fips affected Chainguard tekton-pipelines-events-fips —
tekton-pipelines-fips affected Chainguard tekton-pipelines-fips —
tekton-pipelines-nop-fips affected Chainguard tekton-pipelines-nop-fips —
tekton-pipelines-resolvers-fips affected Chainguard tekton-pipelines-resolvers-fips —
tekton-pipelines-sidecarlogresults-fips affected Chainguard tekton-pipelines-sidecarlogresults-fips —
tekton-pipelines-webhook-fips affected Chainguard tekton-pipelines-webhook-fips —
tekton-pipelines-workingdirinit-fips affected Chainguard tekton-pipelines-workingdirinit-fips —
telegraf-1.29 affected Chainguard telegraf-1.29 —
telegraf-1.29 affected Wolfi telegraf-1.29 —
telegraf-1.30 affected Wolfi telegraf-1.30 —
telegraf-1.30 affected Chainguard telegraf-1.30 —
tempo affected Wolfi tempo —
tempo affected Chainguard tempo —
temporal affected Wolfi temporal —
temporal affected Chainguard temporal —
temporal-cassandra-tool-fips affected Chainguard temporal-cassandra-tool-fips —
temporal-cassandra-tool-fips-compat affected Chainguard temporal-cassandra-tool-fips-compat —
temporal-compat-fips affected Chainguard temporal-compat-fips —
temporal-docgen-fips affected Chainguard temporal-docgen-fips —
temporal-fips affected Chainguard temporal-fips —
temporal-server affected Wolfi temporal-server —
temporal-server affected Chainguard temporal-server —
temporal-server-fips affected Chainguard temporal-server-fips —
temporal-server-fips-compat affected Chainguard temporal-server-fips-compat —
temporal-server-oci-entrypoint-fips affected Chainguard temporal-server-oci-entrypoint-fips —
temporal-server-schema-fips affected Chainguard temporal-server-schema-fips —
temporal-sql-tool-fips affected Chainguard temporal-sql-tool-fips —
temporal-sql-tool-fips-compat affected Chainguard temporal-sql-tool-fips-compat —
temporal-ui-server affected Chainguard temporal-ui-server —
temporal-ui-server affected Wolfi temporal-ui-server —
temporal-ui-server-fips affected Chainguard temporal-ui-server-fips —
terraform affected Wolfi terraform —
terraform affected Chainguard terraform —
terraform-docs affected Wolfi terraform-docs —
terraform-docs affected Chainguard terraform-docs —
terraform-fips-1.5 affected Chainguard terraform-fips-1.5 —
terraform-provider-azurerm affected Wolfi terraform-provider-azurerm —
terraform-provider-azurerm affected Chainguard terraform-provider-azurerm —
terraform-provider-google affected Chainguard terraform-provider-google —
terraform-provider-google affected Wolfi terraform-provider-google —
terraform-provider-pagerduty affected Wolfi terraform-provider-pagerduty —
terraform-provider-pagerduty affected Chainguard terraform-provider-pagerduty —
terraform-provider-pagerduty-fips affected Chainguard terraform-provider-pagerduty-fips —
terraform-provider-sendgrid affected Chainguard terraform-provider-sendgrid —
terraform-provider-sendgrid affected Wolfi terraform-provider-sendgrid —
terraform-provider-sendgrid-fips affected Chainguard terraform-provider-sendgrid-fips —
terragrunt affected Chainguard terragrunt —
terragrunt affected Wolfi terragrunt —
tflint affected Chainguard tflint —
tflint affected Wolfi tflint —
tflint-compat affected Chainguard tflint-compat —
tflint-compat affected Wolfi tflint-compat —
tfsec affected Wolfi tfsec —
tfsec affected Chainguard tfsec —
thanos affected Chainguard thanos —
thanos affected Wolfi thanos —
thanos-fips affected Chainguard thanos-fips —
thanos-fips-iamguarded-compat affected Chainguard thanos-fips-iamguarded-compat —
thanos-operator affected Chainguard thanos-operator —
thanos-operator affected Wolfi thanos-operator —
thanos-operator-compat affected Chainguard thanos-operator-compat —
thanos-operator-compat affected Wolfi thanos-operator-compat —
thanos-operator-fips affected Chainguard thanos-operator-fips —
thanos-operator-fips-compat affected Chainguard thanos-operator-fips-compat —
tigera-operator-1.28 affected Chainguard tigera-operator-1.28 —
tigera-operator-1.29 affected Chainguard tigera-operator-1.29 —
tigera-operator-1.30 affected Wolfi tigera-operator-1.30 —
tigera-operator-1.30 affected Chainguard tigera-operator-1.30 —
tigera-operator-1.31 affected Wolfi tigera-operator-1.31 —
tigera-operator-1.31 affected Chainguard tigera-operator-1.31 —
tigera-operator-1.32 affected Wolfi tigera-operator-1.32 —
tigera-operator-1.32 affected Chainguard tigera-operator-1.32 —
tigera-operator-1.33 affected Chainguard tigera-operator-1.33 —
tigera-operator-1.33 affected Wolfi tigera-operator-1.33 —
tigera-operator-fips affected Chainguard tigera-operator-fips —
tigera-operator-fips-1.29 affected Chainguard tigera-operator-fips-1.29 —
tigera-operator-fips-1.32 affected Chainguard tigera-operator-fips-1.32 —
timestamp-authority affected Chainguard timestamp-authority —
timestamp-authority affected Wolfi timestamp-authority —
timestamp-authority-fips affected Chainguard timestamp-authority-fips —
timestamp-authority-fips-cli affected Chainguard timestamp-authority-fips-cli —
timestamp-authority-fips-server affected Chainguard timestamp-authority-fips-server —
timoni affected Chainguard timoni —
timoni affected Wolfi timoni —
tkn affected Wolfi tkn —
tkn affected Chainguard tkn —
tkn-fips affected Chainguard tkn-fips —
trillian affected Chainguard trillian —
trillian affected Wolfi trillian —
trillian-fips affected Chainguard trillian-fips —
trillian-fips-logserver affected Chainguard trillian-fips-logserver —
trillian-fips-logsigner affected Chainguard trillian-fips-logsigner —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
trust-manager affected Chainguard trust-manager —
trust-manager affected Wolfi trust-manager —
trust-manager-fips affected Chainguard trust-manager-fips —
up affected Wolfi up —
up affected Chainguard up —
vault-csi-provider affected Chainguard vault-csi-provider —
vault-csi-provider affected Wolfi vault-csi-provider —
vault-csi-provider-compat affected Chainguard vault-csi-provider-compat —
vault-csi-provider-compat affected Wolfi vault-csi-provider-compat —
vault-k8s affected Chainguard vault-k8s —
vault-k8s affected Wolfi vault-k8s —
vault-k8s-fips affected Chainguard vault-k8s-fips —
vela-cli affected Wolfi vela-cli —
vela-cli affected Chainguard vela-cli —
vela-core affected Chainguard vela-core —
vela-core affected Wolfi vela-core —
velero affected Wolfi velero —
velero affected Chainguard velero —
velero-compat affected Chainguard velero-compat —
velero-compat affected Wolfi velero-compat —
velero-compat-fips affected Chainguard velero-compat-fips —
velero-fips affected Chainguard velero-fips —
velero-plugin-for-aws affected Wolfi velero-plugin-for-aws —
velero-plugin-for-aws affected Chainguard velero-plugin-for-aws —
velero-plugin-for-aws-fips affected Chainguard velero-plugin-for-aws-fips —
velero-plugin-for-aws-fips-compat affected Chainguard velero-plugin-for-aws-fips-compat —
velero-plugin-for-csi affected Chainguard velero-plugin-for-csi —
velero-plugin-for-csi affected Wolfi velero-plugin-for-csi —
velero-plugin-for-csi-fips affected Chainguard velero-plugin-for-csi-fips —
velero-plugin-for-csi-fips-compat affected Chainguard velero-plugin-for-csi-fips-compat —
velero-restore-helper affected Chainguard velero-restore-helper —
velero-restore-helper affected Wolfi velero-restore-helper —
velero-restore-helper-fips affected Chainguard velero-restore-helper-fips —
vertical-pod-autoscaler affected Chainguard vertical-pod-autoscaler —
vertical-pod-autoscaler affected Wolfi vertical-pod-autoscaler —
vertical-pod-autoscaler-fips affected Chainguard vertical-pod-autoscaler-fips —
vertical-pod-autoscaler-recommender affected Wolfi vertical-pod-autoscaler-recommender —
vertical-pod-autoscaler-recommender affected Chainguard vertical-pod-autoscaler-recommender —
vertical-pod-autoscaler-recommender-fips affected Chainguard vertical-pod-autoscaler-recommender-fips —
vertical-pod-autoscaler-updater affected Chainguard vertical-pod-autoscaler-updater —
vertical-pod-autoscaler-updater affected Wolfi vertical-pod-autoscaler-updater —
vertical-pod-autoscaler-updater-fips affected Chainguard vertical-pod-autoscaler-updater-fips —
vexctl affected Wolfi vexctl —
vexctl affected Chainguard vexctl —
volume-modifier-for-k8s affected Wolfi volume-modifier-for-k8s —
volume-modifier-for-k8s affected Chainguard volume-modifier-for-k8s —
volume-modifier-for-k8s-fips affected Chainguard volume-modifier-for-k8s-fips —
vt-cli affected Chainguard vt-cli —
vt-cli affected Wolfi vt-cli —
wait-for-port affected Chainguard wait-for-port —
wait-for-port affected Wolfi wait-for-port —
wavefront-collector-for-kubernetes-1.12 affected Chainguard wavefront-collector-for-kubernetes-1.12 —
wavefront-collector-for-kubernetes-1.13 affected Chainguard wavefront-collector-for-kubernetes-1.13 —
wazero affected Chainguard wazero —
wazero affected Wolfi wazero —
wire-go affected Chainguard wire-go —
wire-go affected Wolfi wire-go —
wireguard-go affected Chainguard wireguard-go —
wireguard-go affected Wolfi wireguard-go —
xcaddy affected Chainguard xcaddy —
xcaddy affected Wolfi xcaddy —
yam affected Wolfi yam —
yam affected Chainguard yam —
yq affected Wolfi yq —
yq affected Chainguard yq —
ytt affected Chainguard ytt —
ytt affected Wolfi ytt —
zarf affected Wolfi zarf —
zarf affected Chainguard zarf —
zot affected Chainguard zot —
zot affected Wolfi zot —
Upstream advisory

CGA-5qmc-vxrj-v4ww

GooglePoC exploit2026-01-29

CGA-5qmc-vxrj-v4ww

Affected products

ProductStatusVendorPackageEcosystem
hadoop-fips-3.3.6 affected Chainguard hadoop-fips-3.3.6 —
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Wolfi trino-config —
trino-config affected Chainguard trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-ai-functions affected Chainguard trino-plugin-ai-functions —
trino-plugin-ai-functions affected Wolfi trino-plugin-ai-functions —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-duckdb affected Chainguard trino-plugin-duckdb —
trino-plugin-duckdb affected Wolfi trino-plugin-duckdb —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exasol affected Wolfi trino-plugin-exasol —
trino-plugin-exasol affected Chainguard trino-plugin-exasol —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-faker affected Wolfi trino-plugin-faker —
trino-plugin-faker affected Chainguard trino-plugin-faker —
trino-plugin-functions-python affected Chainguard trino-plugin-functions-python —
trino-plugin-functions-python affected Wolfi trino-plugin-functions-python —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-server-event-listener affected Wolfi trino-plugin-http-server-event-listener —
trino-plugin-http-server-event-listener affected Chainguard trino-plugin-http-server-event-listener —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka-event-listener affected Chainguard trino-plugin-kafka-event-listener —
trino-plugin-kafka-event-listener affected Wolfi trino-plugin-kafka-event-listener —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-lakehouse affected Chainguard trino-plugin-lakehouse —
trino-plugin-lakehouse affected Wolfi trino-plugin-lakehouse —
trino-plugin-ldap-group-provider affected Wolfi trino-plugin-ldap-group-provider —
trino-plugin-ldap-group-provider affected Chainguard trino-plugin-ldap-group-provider —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-loki affected Chainguard trino-plugin-loki —
trino-plugin-loki affected Wolfi trino-plugin-loki —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-opa affected Chainguard trino-plugin-opa —
trino-plugin-opa affected Wolfi trino-plugin-opa —
trino-plugin-openlineage affected Wolfi trino-plugin-openlineage —
trino-plugin-openlineage affected Chainguard trino-plugin-openlineage —
trino-plugin-opensearch affected Wolfi trino-plugin-opensearch —
trino-plugin-opensearch affected Chainguard trino-plugin-opensearch —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-phoenix5 affected Wolfi trino-plugin-phoenix5 —
trino-plugin-phoenix5 affected Chainguard trino-plugin-phoenix5 —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-ranger affected Chainguard trino-plugin-ranger —
trino-plugin-ranger affected Wolfi trino-plugin-ranger —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-snowflake affected Wolfi trino-plugin-snowflake —
trino-plugin-snowflake affected Chainguard trino-plugin-snowflake —
trino-plugin-spooling-filesystem affected Wolfi trino-plugin-spooling-filesystem —
trino-plugin-spooling-filesystem affected Chainguard trino-plugin-spooling-filesystem —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
trino-plugin-vertica affected Chainguard trino-plugin-vertica —
trino-plugin-vertica affected Wolfi trino-plugin-vertica —
Upstream advisory

CGA-3x75-f9j7-7hm9

GooglePoC exploit2026-01-28

CGA-3x75-f9j7-7hm9

Affected products

ProductStatusVendorPackageEcosystem
trino affected Chainguard trino —
trino affected Wolfi trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-qhcm-7766-m99r

Open SourcePoC exploit2026-01-28

CGA-qhcm-7766-m99r

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
Upstream advisory

CGA-m79h-m4qp-c8hr

Open SourcePoC exploit2026-01-28

CGA-m79h-m4qp-c8hr

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
Upstream advisory

CGA-h5p8-63jc-vw2w

Open SourcePoC exploit2026-01-28

CGA-h5p8-63jc-vw2w

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.22 affected Chainguard istio-cni-fips-1.22 —
istio-cni-fips-1.22-compat affected Chainguard istio-cni-fips-1.22-compat —
istio-fips-1.22 affected Chainguard istio-fips-1.22 —
istio-install-cni-fips-1.22 affected Chainguard istio-install-cni-fips-1.22 —
istio-install-cni-fips-1.22-compat affected Chainguard istio-install-cni-fips-1.22-compat —
istio-operator-fips-1.22 affected Chainguard istio-operator-fips-1.22 —
istio-pilot-agent-fips-1.22 affected Chainguard istio-pilot-agent-fips-1.22 —
istio-pilot-agent-fips-1.22-compat affected Chainguard istio-pilot-agent-fips-1.22-compat —
istio-pilot-discovery-fips-1.22 affected Chainguard istio-pilot-discovery-fips-1.22 —
Upstream advisory

CGA-cpwc-gv8q-5chh

Open SourcePoC exploit2026-01-28

CGA-cpwc-gv8q-5chh

Affected products

ProductStatusVendorPackageEcosystem
k8sgpt affected Chainguard k8sgpt —
k8sgpt affected Wolfi k8sgpt —
Upstream advisory

CGA-8whc-c7pr-ghjj

Open SourcePoC exploit2026-01-28

CGA-8whc-c7pr-ghjj

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
Upstream advisory

CGA-4935-wffx-fpwg

Open SourcePoC exploit2026-01-28

CGA-4935-wffx-fpwg

Affected products

ProductStatusVendorPackageEcosystem
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
Upstream advisory

CGA-3r43-4524-mr84

Open SourcePoC exploit2026-01-28

CGA-3r43-4524-mr84

Affected products

ProductStatusVendorPackageEcosystem
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
Upstream advisory

CGA-2gxc-mcch-rv3g

Open SourcePoC exploit2026-01-28

CGA-2gxc-mcch-rv3g

Affected products

ProductStatusVendorPackageEcosystem
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
Upstream advisory

CGA-mch8-m3fg-wvjr

Open SourcePoC exploit2026-01-10

CGA-mch8-m3fg-wvjr

Affected products

ProductStatusVendorPackageEcosystem
aactl affected Chainguard aactl —
aactl affected Wolfi aactl —
apko affected Wolfi apko —
apko affected Chainguard apko —
argo-workflow-cli affected Wolfi argo-workflow-cli —
argo-workflow-cli affected Chainguard argo-workflow-cli —
argo-workflow-cli-fips affected Chainguard argo-workflow-cli-fips —
argo-workflow-controller affected Chainguard argo-workflow-controller —
argo-workflow-controller affected Wolfi argo-workflow-controller —
argo-workflow-controller-compat affected Chainguard argo-workflow-controller-compat —
argo-workflow-controller-compat affected Wolfi argo-workflow-controller-compat —
argo-workflow-controller-compat-fips affected Chainguard argo-workflow-controller-compat-fips —
argo-workflow-controller-fips affected Chainguard argo-workflow-controller-fips —
argo-workflow-executor affected Chainguard argo-workflow-executor —
argo-workflow-executor affected Wolfi argo-workflow-executor —
argo-workflow-executor-compat affected Chainguard argo-workflow-executor-compat —
argo-workflow-executor-compat affected Wolfi argo-workflow-executor-compat —
argo-workflow-executor-compat-fips affected Chainguard argo-workflow-executor-compat-fips —
argo-workflow-executor-fips affected Chainguard argo-workflow-executor-fips —
argo-workflows affected Chainguard argo-workflows —
argo-workflows affected Wolfi argo-workflows —
argo-workflows-fips affected Chainguard argo-workflows-fips —
argo-workflows-known-hosts affected Chainguard argo-workflows-known-hosts —
argo-workflows-known-hosts affected Wolfi argo-workflows-known-hosts —
argo-workflows-known-hosts-fips affected Chainguard argo-workflows-known-hosts-fips —
argo-workflows-ui affected Chainguard argo-workflows-ui —
argo-workflows-ui affected Wolfi argo-workflows-ui —
bom affected Wolfi bom —
bom affected Chainguard bom —
buf affected Chainguard buf —
buf affected Wolfi buf —
buildah affected Wolfi buildah —
buildah affected Chainguard buildah —
buildctl affected Wolfi buildctl —
buildctl affected Chainguard buildctl —
buildkitd affected Wolfi buildkitd —
buildkitd affected Chainguard buildkitd —
cadvisor affected Chainguard cadvisor —
cadvisor affected Wolfi cadvisor —
cadvisor-fips affected Chainguard cadvisor-fips —
cert-manager-1.12 affected Wolfi cert-manager-1.12 —
cert-manager-1.12 affected Chainguard cert-manager-1.12 —
cert-manager-1.12-acmesolver affected Wolfi cert-manager-1.12-acmesolver —
cert-manager-1.12-acmesolver affected Chainguard cert-manager-1.12-acmesolver —
cert-manager-1.12-cainjector affected Wolfi cert-manager-1.12-cainjector —
cert-manager-1.12-cainjector affected Chainguard cert-manager-1.12-cainjector —
cert-manager-1.12-controller affected Wolfi cert-manager-1.12-controller —
cert-manager-1.12-controller affected Chainguard cert-manager-1.12-controller —
cert-manager-1.12-webhook affected Chainguard cert-manager-1.12-webhook —
cert-manager-1.12-webhook affected Wolfi cert-manager-1.12-webhook —
cert-manager-1.14 affected Chainguard cert-manager-1.14 —
cert-manager-1.14 affected Wolfi cert-manager-1.14 —
cert-manager-1.14-acmesolver affected Wolfi cert-manager-1.14-acmesolver —
cert-manager-1.14-acmesolver affected Chainguard cert-manager-1.14-acmesolver —
cert-manager-1.14-cainjector affected Chainguard cert-manager-1.14-cainjector —
cert-manager-1.14-cainjector affected Wolfi cert-manager-1.14-cainjector —
cert-manager-1.14-controller affected Wolfi cert-manager-1.14-controller —
cert-manager-1.14-controller affected Chainguard cert-manager-1.14-controller —
cert-manager-1.14-startupapicheck affected Chainguard cert-manager-1.14-startupapicheck —
cert-manager-1.14-webhook affected Wolfi cert-manager-1.14-webhook —
cert-manager-1.14-webhook affected Chainguard cert-manager-1.14-webhook —
cert-manager-acmesolver-1.12 affected Chainguard cert-manager-acmesolver-1.12 —
cert-manager-acmesolver-1.12-bitnami-compat affected Chainguard cert-manager-acmesolver-1.12-bitnami-compat —
cert-manager-acmesolver-1.12-iamguarded-compat affected Chainguard cert-manager-acmesolver-1.12-iamguarded-compat —
cert-manager-acmesolver-fips-1.12 affected Chainguard cert-manager-acmesolver-fips-1.12 —
cert-manager-cainjector-1.12 affected Chainguard cert-manager-cainjector-1.12 —
cert-manager-cainjector-1.12-bitnami-compat affected Chainguard cert-manager-cainjector-1.12-bitnami-compat —
cert-manager-cainjector-1.12-iamguarded-compat affected Chainguard cert-manager-cainjector-1.12-iamguarded-compat —
cert-manager-cainjector-fips-1.12 affected Chainguard cert-manager-cainjector-fips-1.12 —
cert-manager-cmctl affected Chainguard cert-manager-cmctl —
cert-manager-cmctl affected Wolfi cert-manager-cmctl —
cert-manager-cmctl-fips affected Chainguard cert-manager-cmctl-fips —
cert-manager-controller-1.12 affected Chainguard cert-manager-controller-1.12 —
cert-manager-controller-1.12-bitnami-compat affected Chainguard cert-manager-controller-1.12-bitnami-compat —
cert-manager-controller-1.12-iamguarded-compat affected Chainguard cert-manager-controller-1.12-iamguarded-compat —
cert-manager-controller-fips-1.12 affected Chainguard cert-manager-controller-fips-1.12 —
cert-manager-fips-1.12 affected Chainguard cert-manager-fips-1.12 —
cert-manager-fips-1.12-acmesolver affected Chainguard cert-manager-fips-1.12-acmesolver —
cert-manager-fips-1.12-cainjector affected Chainguard cert-manager-fips-1.12-cainjector —
cert-manager-fips-1.12-cmctl affected Chainguard cert-manager-fips-1.12-cmctl —
cert-manager-fips-1.12-controller affected Chainguard cert-manager-fips-1.12-controller —
cert-manager-fips-1.12-webhook affected Chainguard cert-manager-fips-1.12-webhook —
cert-manager-fips-1.14 affected Chainguard cert-manager-fips-1.14 —
cert-manager-fips-1.14-acmesolver affected Chainguard cert-manager-fips-1.14-acmesolver —
cert-manager-fips-1.14-cainjector affected Chainguard cert-manager-fips-1.14-cainjector —
cert-manager-fips-1.14-cmctl affected Chainguard cert-manager-fips-1.14-cmctl —
cert-manager-fips-1.14-controller affected Chainguard cert-manager-fips-1.14-controller —
cert-manager-fips-1.14-startupapicheck affected Chainguard cert-manager-fips-1.14-startupapicheck —
cert-manager-fips-1.14-webhook affected Chainguard cert-manager-fips-1.14-webhook —
cert-manager-webhook-1.12 affected Chainguard cert-manager-webhook-1.12 —
cert-manager-webhook-1.12-bitnami-compat affected Chainguard cert-manager-webhook-1.12-bitnami-compat —
cert-manager-webhook-1.12-iamguarded-compat affected Chainguard cert-manager-webhook-1.12-iamguarded-compat —
cert-manager-webhook-fips-1.12 affected Chainguard cert-manager-webhook-fips-1.12 —
chainctl affected Chainguard chainctl —
chartmuseum affected Chainguard chartmuseum —
chartmuseum affected Wolfi chartmuseum —
chartmuseum-fips affected Chainguard chartmuseum-fips —
cilium-cli affected Wolfi cilium-cli —
cilium-cli affected Chainguard cilium-cli —
cmctl-1.12 affected Wolfi cmctl-1.12 —
cmctl-1.12 affected Chainguard cmctl-1.12 —
cmctl-1.12-fips affected Chainguard cmctl-1.12-fips —
cmctl-1.14 affected Wolfi cmctl-1.14 —
cmctl-1.14 affected Chainguard cmctl-1.14 —
cmctl-1.14-fips affected Chainguard cmctl-1.14-fips —
cmctl-fips-1.12 affected Chainguard cmctl-fips-1.12 —
cosign affected Chainguard cosign —
cosign affected Wolfi cosign —
cosign-fips affected Chainguard cosign-fips —
cosign-fips affected Wolfi cosign-fips —
crane affected Chainguard crane —
crane affected Wolfi crane —
crane-cov affected Chainguard crane-cov —
crane-cov affected Wolfi crane-cov —
crictl affected Wolfi crictl —
crictl affected Chainguard crictl —
critest affected Chainguard critest —
critest affected Wolfi critest —
cri-tools affected Wolfi cri-tools —
cri-tools affected Chainguard cri-tools —
crossplane affected Wolfi crossplane —
crossplane affected Chainguard crossplane —
crossplane-crank affected Wolfi crossplane-crank —
crossplane-crank affected Chainguard crossplane-crank —
crossplane-xfn affected Wolfi crossplane-xfn —
crossplane-xfn affected Chainguard crossplane-xfn —
ctop affected Chainguard ctop —
ctop affected Wolfi ctop —
dagdotdev affected Wolfi dagdotdev —
dagdotdev affected Chainguard dagdotdev —
dagger affected Chainguard dagger —
dagger affected Wolfi dagger —
datadog-agent affected Wolfi datadog-agent —
datadog-agent affected Chainguard datadog-agent —
datadog-agent-core-integrations affected Chainguard datadog-agent-core-integrations —
datadog-agent-core-integrations affected Wolfi datadog-agent-core-integrations —
datadog-agent-core-integrations-fips affected Chainguard datadog-agent-core-integrations-fips —
datadog-agent-fakeintake affected Chainguard datadog-agent-fakeintake —
datadog-agent-fakeintake affected Wolfi datadog-agent-fakeintake —
datadog-agent-fakeintake-fips affected Chainguard datadog-agent-fakeintake-fips —
datadog-agent-fips affected Chainguard datadog-agent-fips —
datadog-agent-jmx affected Wolfi datadog-agent-jmx —
datadog-agent-jmx affected Chainguard datadog-agent-jmx —
datadog-agent-jmx-fips affected Chainguard datadog-agent-jmx-fips —
datadog-agent-oci-compat affected Chainguard datadog-agent-oci-compat —
datadog-agent-oci-compat affected Wolfi datadog-agent-oci-compat —
datadog-agent-oci-compat-fips affected Chainguard datadog-agent-oci-compat-fips —
datadog-agent-s6-overlay affected Chainguard datadog-agent-s6-overlay —
datadog-agent-s6-overlay affected Wolfi datadog-agent-s6-overlay —
datadog-agent-s6-overlay-fips affected Chainguard datadog-agent-s6-overlay-fips —
datadog-cluster-agent affected Wolfi datadog-cluster-agent —
datadog-cluster-agent affected Chainguard datadog-cluster-agent —
datadog-cluster-agent-fips affected Chainguard datadog-cluster-agent-fips —
datadog-cluster-agent-oci-compat affected Wolfi datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat affected Chainguard datadog-cluster-agent-oci-compat —
datadog-cluster-agent-oci-compat-fips affected Chainguard datadog-cluster-agent-oci-compat-fips —
dive affected Chainguard dive —
dive affected Wolfi dive —
docker affected Chainguard docker —
docker affected Wolfi docker —
docker-compose affected Wolfi docker-compose —
docker-compose affected Chainguard docker-compose —
docker-credential-cgr affected Chainguard docker-credential-cgr —
docker-credential-gcr affected Wolfi docker-credential-gcr —
docker-credential-gcr affected Chainguard docker-credential-gcr —
dogstatsd affected Chainguard dogstatsd —
dogstatsd affected Wolfi dogstatsd —
eksctl affected Wolfi eksctl —
eksctl affected Chainguard eksctl —
falcoctl affected Wolfi falcoctl —
falcoctl affected Chainguard falcoctl —
falcoctl-fips affected Chainguard falcoctl-fips —
falcoctl-fips-0.4 affected Chainguard falcoctl-fips-0.4 —
filebeat affected Wolfi filebeat —
filebeat affected Chainguard filebeat —
filebeat-fips affected Chainguard filebeat-fips —
flux affected Wolfi flux —
flux affected Chainguard flux —
fluxcd-source-controller-bitnami-compat affected Chainguard fluxcd-source-controller-bitnami-compat —
fluxcd-source-controller-bitnami-compat affected Wolfi fluxcd-source-controller-bitnami-compat —
flux-compat affected Wolfi flux-compat —
flux-compat affected Chainguard flux-compat —
flux-helm-controller affected Chainguard flux-helm-controller —
flux-helm-controller affected Wolfi flux-helm-controller —
flux-helm-controller-bitnami-compat affected Chainguard flux-helm-controller-bitnami-compat —
flux-helm-controller-bitnami-compat affected Wolfi flux-helm-controller-bitnami-compat —
flux-helm-controller-iamguarded-compat affected Wolfi flux-helm-controller-iamguarded-compat —
flux-helm-controller-iamguarded-compat affected Chainguard flux-helm-controller-iamguarded-compat —
flux-image-reflector-controller affected Chainguard flux-image-reflector-controller —
flux-image-reflector-controller affected Wolfi flux-image-reflector-controller —
flux-image-reflector-controller-iamguarded-compat affected Wolfi flux-image-reflector-controller-iamguarded-compat —
flux-image-reflector-controller-iamguarded-compat affected Chainguard flux-image-reflector-controller-iamguarded-compat —
flux-source-controller affected Wolfi flux-source-controller —
flux-source-controller affected Chainguard flux-source-controller —
flux-source-controller-bitnami-compat affected Wolfi flux-source-controller-bitnami-compat —
flux-source-controller-bitnami-compat affected Chainguard flux-source-controller-bitnami-compat —
flux-source-controller-iamguarded-compat affected Wolfi flux-source-controller-iamguarded-compat —
flux-source-controller-iamguarded-compat affected Chainguard flux-source-controller-iamguarded-compat —
gatekeeper-3.15 affected Wolfi gatekeeper-3.15 —
gatekeeper-3.15 affected Chainguard gatekeeper-3.15 —
gatekeeper-3.15-compat affected Wolfi gatekeeper-3.15-compat —
gatekeeper-3.15-compat affected Chainguard gatekeeper-3.15-compat —
gatekeeper-3.15-crds affected Chainguard gatekeeper-3.15-crds —
gatekeeper-3.15-crds-compat affected Chainguard gatekeeper-3.15-crds-compat —
gatekeeper-3.15-gator affected Wolfi gatekeeper-3.15-gator —
gatekeeper-3.15-gator affected Chainguard gatekeeper-3.15-gator —
gatekeeper-3.16 affected Wolfi gatekeeper-3.16 —
gatekeeper-3.16 affected Chainguard gatekeeper-3.16 —
gatekeeper-3.16-compat affected Wolfi gatekeeper-3.16-compat —
gatekeeper-3.16-compat affected Chainguard gatekeeper-3.16-compat —
gatekeeper-3.16-crds affected Chainguard gatekeeper-3.16-crds —
gatekeeper-3.16-crds-compat affected Chainguard gatekeeper-3.16-crds-compat —
gatekeeper-3.16-gator affected Wolfi gatekeeper-3.16-gator —
gatekeeper-3.16-gator affected Chainguard gatekeeper-3.16-gator —
gh affected Chainguard gh —
gh affected Wolfi gh —
gh-doc affected Chainguard gh-doc —
gh-doc affected Wolfi gh-doc —
gitlab-rails-ee-17.0 affected Chainguard gitlab-rails-ee-17.0 —
gitlab-rails-ee-17.3 affected Chainguard gitlab-rails-ee-17.3 —
gitlab-rails-ee-assets-17.3 affected Chainguard gitlab-rails-ee-assets-17.3 —
gitlab-rails-ee-assets-fips-17.3 affected Chainguard gitlab-rails-ee-assets-fips-17.3 —
gitlab-rails-ee-doc-17.3 affected Chainguard gitlab-rails-ee-doc-17.3 —
gitlab-rails-ee-doc-fips-17.3 affected Chainguard gitlab-rails-ee-doc-fips-17.3 —
gitlab-rails-ee-fips-17.0 affected Chainguard gitlab-rails-ee-fips-17.0 —
gitlab-rails-ee-fips-17.3 affected Chainguard gitlab-rails-ee-fips-17.3 —
gitsign affected Wolfi gitsign —
gitsign affected Chainguard gitsign —
gitsign-config affected Chainguard gitsign-config —
gitsign-config affected Wolfi gitsign-config —
gitsign-credential-cache affected Wolfi gitsign-credential-cache —
gitsign-credential-cache affected Chainguard gitsign-credential-cache —
goreleaser affected Wolfi goreleaser —
goreleaser affected Chainguard goreleaser —
grafana-alloy affected Wolfi grafana-alloy —
grafana-alloy affected Chainguard grafana-alloy —
grafana-alloy-compat affected Wolfi grafana-alloy-compat —
grafana-alloy-compat affected Chainguard grafana-alloy-compat —
grafana-alloy-fips affected Chainguard grafana-alloy-fips —
grype affected Wolfi grype —
grype affected Chainguard grype —
guac affected Wolfi guac —
guac affected Chainguard guac —
guaccsub affected Chainguard guaccsub —
guaccsub affected Wolfi guaccsub —
guacgql affected Chainguard guacgql —
guacgql affected Wolfi guacgql —
guacingest affected Wolfi guacingest —
guacingest affected Chainguard guacingest —
guacone affected Chainguard guacone —
guacone affected Wolfi guacone —
harbor-2.11 affected Chainguard harbor-2.11 —
harbor-2.11 affected Wolfi harbor-2.11 —
harbor-2.11-exporter affected Chainguard harbor-2.11-exporter —
harbor-2.11-jobservice affected Chainguard harbor-2.11-jobservice —
harbor-2.11-jobservice affected Wolfi harbor-2.11-jobservice —
harbor-2.11-photon-registry affected Chainguard harbor-2.11-photon-registry —
harbor-2.11-portal affected Wolfi harbor-2.11-portal —
harbor-2.11-portal affected Chainguard harbor-2.11-portal —
harbor-2.11-portal-nginx-config affected Chainguard harbor-2.11-portal-nginx-config —
harbor-2.11-portal-nginx-config affected Wolfi harbor-2.11-portal-nginx-config —
harbor-2.11-redis-compat affected Chainguard harbor-2.11-redis-compat —
harbor-2.11-registryctl affected Chainguard harbor-2.11-registryctl —
harbor-2.11-registryctl affected Wolfi harbor-2.11-registryctl —
harbor-fips-2.11 affected Chainguard harbor-fips-2.11 —
harbor-fips-2.11-db affected Chainguard harbor-fips-2.11-db —
harbor-fips-2.11-exporter affected Chainguard harbor-fips-2.11-exporter —
harbor-fips-2.11-jobservice affected Chainguard harbor-fips-2.11-jobservice —
harbor-fips-2.11-photon-registry affected Chainguard harbor-fips-2.11-photon-registry —
harbor-fips-2.11-portal affected Chainguard harbor-fips-2.11-portal —
harbor-fips-2.11-redis-compat affected Chainguard harbor-fips-2.11-redis-compat —
harbor-fips-2.11-registryctl affected Chainguard harbor-fips-2.11-registryctl —
harbor-scanner-trivy affected Wolfi harbor-scanner-trivy —
harbor-scanner-trivy affected Chainguard harbor-scanner-trivy —
harbor-scanner-trivy-fips affected Chainguard harbor-scanner-trivy-fips —
helm affected Chainguard helm —
helm affected Wolfi helm —
helm-3 affected Chainguard helm-3 —
helm-3 affected Wolfi helm-3 —
helm-4 affected Chainguard helm-4 —
helm-4 affected Wolfi helm-4 —
helm-fips affected Chainguard helm-fips —
helm-fips-3 affected Chainguard helm-fips-3 —
helm-fips-4 affected Chainguard helm-fips-4 —
helm-operator affected Chainguard helm-operator —
helm-operator affected Wolfi helm-operator —
helm-operator-compat affected Chainguard helm-operator-compat —
helm-operator-compat affected Wolfi helm-operator-compat —
helm-operator-fips affected Chainguard helm-operator-fips —
helm-operator-fips-1.33 affected Chainguard helm-operator-fips-1.33 —
helm-operator-fips-compat affected Chainguard helm-operator-fips-compat —
helm-push affected Wolfi helm-push —
helm-push affected Chainguard helm-push —
istio-cni-fips-1.21 affected Chainguard istio-cni-fips-1.21 —
istio-cni-fips-1.21-compat affected Chainguard istio-cni-fips-1.21-compat —
istio-cni-fips-1.22 affected Chainguard istio-cni-fips-1.22 —
istio-cni-fips-1.22-compat affected Chainguard istio-cni-fips-1.22-compat —
istio-fips-1.21 affected Chainguard istio-fips-1.21 —
istio-fips-1.22 affected Chainguard istio-fips-1.22 —
istio-install-cni-fips-1.21 affected Chainguard istio-install-cni-fips-1.21 —
istio-install-cni-fips-1.21-compat affected Chainguard istio-install-cni-fips-1.21-compat —
istio-install-cni-fips-1.22 affected Chainguard istio-install-cni-fips-1.22 —
istio-install-cni-fips-1.22-compat affected Chainguard istio-install-cni-fips-1.22-compat —
istio-operator-1.22 affected Wolfi istio-operator-1.22 —
istio-operator-1.22 affected Chainguard istio-operator-1.22 —
istio-operator-fips-1.21 affected Chainguard istio-operator-fips-1.21 —
istio-operator-fips-1.22 affected Chainguard istio-operator-fips-1.22 —
istio-pilot-agent-1.21 affected Wolfi istio-pilot-agent-1.21 —
istio-pilot-agent-1.21 affected Chainguard istio-pilot-agent-1.21 —
istio-pilot-agent-1.21-compat affected Chainguard istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.21-compat affected Wolfi istio-pilot-agent-1.21-compat —
istio-pilot-agent-1.22 affected Wolfi istio-pilot-agent-1.22 —
istio-pilot-agent-1.22 affected Chainguard istio-pilot-agent-1.22 —
istio-pilot-agent-1.22-compat affected Wolfi istio-pilot-agent-1.22-compat —
istio-pilot-agent-1.22-compat affected Chainguard istio-pilot-agent-1.22-compat —
istio-pilot-agent-fips-1.21 affected Chainguard istio-pilot-agent-fips-1.21 —
istio-pilot-agent-fips-1.21-compat affected Chainguard istio-pilot-agent-fips-1.21-compat —
istio-pilot-agent-fips-1.22 affected Chainguard istio-pilot-agent-fips-1.22 —
istio-pilot-agent-fips-1.22-compat affected Chainguard istio-pilot-agent-fips-1.22-compat —
istio-pilot-discovery-1.21 affected Chainguard istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21 affected Wolfi istio-pilot-discovery-1.21 —
istio-pilot-discovery-1.21-compat affected Wolfi istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.21-compat affected Chainguard istio-pilot-discovery-1.21-compat —
istio-pilot-discovery-1.22 affected Chainguard istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22 affected Wolfi istio-pilot-discovery-1.22 —
istio-pilot-discovery-1.22-compat affected Wolfi istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-1.22-compat affected Chainguard istio-pilot-discovery-1.22-compat —
istio-pilot-discovery-fips-1.21 affected Chainguard istio-pilot-discovery-fips-1.21 —
istio-pilot-discovery-fips-1.22 affected Chainguard istio-pilot-discovery-fips-1.22 —
k3d affected Chainguard k3d —
k3d affected Wolfi k3d —
k3d-proxy affected Wolfi k3d-proxy —
k3d-proxy affected Chainguard k3d-proxy —
k3d-tools affected Wolfi k3d-tools —
k3d-tools affected Chainguard k3d-tools —
k3s affected Chainguard k3s —
k3s affected Wolfi k3s —
k3s-embedded affected Chainguard k3s-embedded —
k3s-embedded affected Wolfi k3s-embedded —
k3s-images affected Chainguard k3s-images —
k3s-images affected Wolfi k3s-images —
k3s-multicall affected Wolfi k3s-multicall —
k3s-multicall affected Chainguard k3s-multicall —
k3s-static affected Chainguard k3s-static —
k3s-static affected Wolfi k3s-static —
k8sgpt affected Wolfi k8sgpt —
k8sgpt affected Chainguard k8sgpt —
k9s affected Wolfi k9s —
k9s affected Chainguard k9s —
kaniko affected Wolfi kaniko —
kaniko affected Chainguard kaniko —
kaniko-fips affected Chainguard kaniko-fips —
kargo affected Wolfi kargo —
kargo affected Chainguard kargo —
kargo-oci-compat affected Chainguard kargo-oci-compat —
kargo-oci-compat affected Wolfi kargo-oci-compat —
katib-cert-generator affected Chainguard katib-cert-generator —
katib-cert-generator affected Wolfi katib-cert-generator —
katib-cert-generator-compat affected Chainguard katib-cert-generator-compat —
katib-cert-generator-compat affected Wolfi katib-cert-generator-compat —
katib-controller affected Wolfi katib-controller —
katib-controller affected Chainguard katib-controller —
katib-controller-compat affected Wolfi katib-controller-compat —
katib-controller-compat affected Chainguard katib-controller-compat —
katib-db-manager affected Chainguard katib-db-manager —
katib-db-manager affected Wolfi katib-db-manager —
katib-db-manager-compat affected Wolfi katib-db-manager-compat —
katib-db-manager-compat affected Chainguard katib-db-manager-compat —
katib-earlystopping affected Wolfi katib-earlystopping —
katib-earlystopping affected Chainguard katib-earlystopping —
katib-file-metricscollector affected Chainguard katib-file-metricscollector —
katib-file-metricscollector affected Wolfi katib-file-metricscollector —
katib-file-metricscollector-compat affected Chainguard katib-file-metricscollector-compat —
katib-file-metricscollector-compat affected Wolfi katib-file-metricscollector-compat —
katib-suggestion-goptuna affected Chainguard katib-suggestion-goptuna —
katib-suggestion-goptuna affected Wolfi katib-suggestion-goptuna —
katib-suggestion-goptuna-compat affected Chainguard katib-suggestion-goptuna-compat —
katib-suggestion-goptuna-compat affected Wolfi katib-suggestion-goptuna-compat —
katib-suggestion-hyperband affected Wolfi katib-suggestion-hyperband —
katib-suggestion-hyperband affected Chainguard katib-suggestion-hyperband —
katib-suggestion-hyperopt affected Chainguard katib-suggestion-hyperopt —
katib-suggestion-hyperopt affected Wolfi katib-suggestion-hyperopt —
katib-suggestion-nas-darts affected Chainguard katib-suggestion-nas-darts —
katib-suggestion-nas-darts affected Wolfi katib-suggestion-nas-darts —
katib-suggestion-nas-enas affected Chainguard katib-suggestion-nas-enas —
katib-suggestion-nas-enas affected Wolfi katib-suggestion-nas-enas —
katib-suggestion-optuna-enas affected Wolfi katib-suggestion-optuna-enas —
katib-suggestion-optuna-enas affected Chainguard katib-suggestion-optuna-enas —
katib-suggestion-pbt-enas affected Chainguard katib-suggestion-pbt-enas —
katib-suggestion-pbt-enas affected Wolfi katib-suggestion-pbt-enas —
katib-suggestion-skopt-enas affected Chainguard katib-suggestion-skopt-enas —
katib-suggestion-skopt-enas affected Wolfi katib-suggestion-skopt-enas —
katib-tfevent-metricscollector affected Chainguard katib-tfevent-metricscollector —
katib-tfevent-metricscollector affected Wolfi katib-tfevent-metricscollector —
ko affected Chainguard ko —
ko affected Wolfi ko —
ko-fips affected Wolfi ko-fips —
ko-fips affected Chainguard ko-fips —
kots affected Chainguard kots —
kots affected Wolfi kots —
kots-compat affected Wolfi kots-compat —
kots-compat affected Chainguard kots-compat —
kots-symlink-compat affected Chainguard kots-symlink-compat —
kots-symlink-compat affected Wolfi kots-symlink-compat —
kpt affected Wolfi kpt —
kpt affected Chainguard kpt —
kubeflow-katib affected Wolfi kubeflow-katib —
kubeflow-katib affected Chainguard kubeflow-katib —
kubescape affected Chainguard kubescape —
kubescape affected Wolfi kubescape —
kyverno-1.11 affected Chainguard kyverno-1.11 —
kyverno-1.12 affected Wolfi kyverno-1.12 —
kyverno-1.12 affected Chainguard kyverno-1.12 —
kyverno-background-controller-1.11 affected Chainguard kyverno-background-controller-1.11 —
kyverno-background-controller-1.12 affected Chainguard kyverno-background-controller-1.12 —
kyverno-background-controller-1.12 affected Wolfi kyverno-background-controller-1.12 —
kyverno-background-controller-fips-1.11 affected Chainguard kyverno-background-controller-fips-1.11 —
kyverno-background-controller-fips-1.12 affected Chainguard kyverno-background-controller-fips-1.12 —
kyverno-cleanup-controller-1.11 affected Chainguard kyverno-cleanup-controller-1.11 —
kyverno-cleanup-controller-1.12 affected Wolfi kyverno-cleanup-controller-1.12 —
kyverno-cleanup-controller-1.12 affected Chainguard kyverno-cleanup-controller-1.12 —
kyverno-cleanup-controller-fips-1.11 affected Chainguard kyverno-cleanup-controller-fips-1.11 —
kyverno-cleanup-controller-fips-1.12 affected Chainguard kyverno-cleanup-controller-fips-1.12 —
kyverno-cli-1.11 affected Chainguard kyverno-cli-1.11 —
kyverno-cli-1.12 affected Chainguard kyverno-cli-1.12 —
kyverno-cli-1.12 affected Wolfi kyverno-cli-1.12 —
kyverno-cli-fips-1.11 affected Chainguard kyverno-cli-fips-1.11 —
kyverno-cli-fips-1.12 affected Chainguard kyverno-cli-fips-1.12 —
kyverno-fips-1.11 affected Chainguard kyverno-fips-1.11 —
kyverno-fips-1.12 affected Chainguard kyverno-fips-1.12 —
kyverno-init-container-1.11 affected Chainguard kyverno-init-container-1.11 —
kyverno-init-container-1.12 affected Wolfi kyverno-init-container-1.12 —
kyverno-init-container-1.12 affected Chainguard kyverno-init-container-1.12 —
kyverno-init-container-fips-1.11 affected Chainguard kyverno-init-container-fips-1.11 —
kyverno-init-container-fips-1.12 affected Chainguard kyverno-init-container-fips-1.12 —
kyverno-reports-controller-1.11 affected Chainguard kyverno-reports-controller-1.11 —
kyverno-reports-controller-1.12 affected Wolfi kyverno-reports-controller-1.12 —
kyverno-reports-controller-1.12 affected Chainguard kyverno-reports-controller-1.12 —
kyverno-reports-controller-fips-1.11 affected Chainguard kyverno-reports-controller-fips-1.11 —
kyverno-reports-controller-fips-1.12 affected Chainguard kyverno-reports-controller-fips-1.12 —
loki-2.9-promtail affected Chainguard loki-2.9-promtail —
loki-3 affected Chainguard loki-3 —
loki-3 affected Wolfi loki-3 —
loki-3.1 affected Wolfi loki-3.1 —
loki-3.1 affected Chainguard loki-3.1 —
loki-3.1-logcli affected Wolfi loki-3.1-logcli —
loki-3.1-logcli affected Chainguard loki-3.1-logcli —
loki-3.1-loki-canary affected Wolfi loki-3.1-loki-canary —
loki-3.1-loki-canary affected Chainguard loki-3.1-loki-canary —
loki-3.1-promtail affected Wolfi loki-3.1-promtail —
loki-3.1-promtail affected Chainguard loki-3.1-promtail —
loki-3-logcli affected Wolfi loki-3-logcli —
loki-3-logcli affected Chainguard loki-3-logcli —
loki-3-loki-canary affected Chainguard loki-3-loki-canary —
loki-3-loki-canary affected Wolfi loki-3-loki-canary —
loki-3-promtail affected Chainguard loki-3-promtail —
loki-3-promtail affected Wolfi loki-3-promtail —
loki-fips-2.9-promtail affected Chainguard loki-fips-2.9-promtail —
loki-fips-3.0 affected Chainguard loki-fips-3.0 —
loki-fips-3.0-logcli affected Chainguard loki-fips-3.0-logcli —
loki-fips-3.0-loki-canary affected Chainguard loki-fips-3.0-loki-canary —
loki-fips-3.0-promtail affected Chainguard loki-fips-3.0-promtail —
melange affected Chainguard melange —
melange affected Wolfi melange —
melange-microvm-init affected Wolfi melange-microvm-init —
melange-microvm-init affected Chainguard melange-microvm-init —
nerdctl affected Chainguard nerdctl —
nerdctl affected Wolfi nerdctl —
neuvector affected Chainguard neuvector —
neuvector affected Wolfi neuvector —
neuvector-cis-benchmarks affected Wolfi neuvector-cis-benchmarks —
neuvector-cis-benchmarks affected Chainguard neuvector-cis-benchmarks —
neuvector-controller affected Chainguard neuvector-controller —
neuvector-controller affected Wolfi neuvector-controller —
neuvector-controller-fips affected Chainguard neuvector-controller-fips —
neuvector-enforcer affected Chainguard neuvector-enforcer —
neuvector-enforcer affected Wolfi neuvector-enforcer —
neuvector-enforcer-fips affected Chainguard neuvector-enforcer-fips —
neuvector-fips affected Chainguard neuvector-fips —
neuvector-monitor affected Chainguard neuvector-monitor —
neuvector-monitor affected Wolfi neuvector-monitor —
neuvector-nstools affected Wolfi neuvector-nstools —
neuvector-nstools affected Chainguard neuvector-nstools —
neuvector-scanner affected Chainguard neuvector-scanner —
neuvector-scanner affected Wolfi neuvector-scanner —
neuvector-scanner-fips affected Chainguard neuvector-scanner-fips —
neuvector-scanner-monitor affected Chainguard neuvector-scanner-monitor —
neuvector-scanner-monitor affected Wolfi neuvector-scanner-monitor —
neuvector-scanner-monitor-fips affected Chainguard neuvector-scanner-monitor-fips —
neuvector-scanner-task affected Wolfi neuvector-scanner-task —
neuvector-scanner-task affected Chainguard neuvector-scanner-task —
neuvector-scanner-task-fips affected Chainguard neuvector-scanner-task-fips —
neuvector-sigstore-interface affected Wolfi neuvector-sigstore-interface —
neuvector-sigstore-interface affected Chainguard neuvector-sigstore-interface —
neuvector-sigstore-interface-fips affected Chainguard neuvector-sigstore-interface-fips —
neuvector-upgrader affected Chainguard neuvector-upgrader —
neuvector-upgrader-fips affected Chainguard neuvector-upgrader-fips —
newrelic-infrastructure-agent affected Chainguard newrelic-infrastructure-agent —
newrelic-infrastructure-agent affected Wolfi newrelic-infrastructure-agent —
opentelemetry-collector affected Wolfi opentelemetry-collector —
opentelemetry-collector affected Chainguard opentelemetry-collector —
opentelemetry-collector-contrib affected Wolfi opentelemetry-collector-contrib —
opentelemetry-collector-contrib affected Chainguard opentelemetry-collector-contrib —
opentelemetry-collector-contrib-fips affected Chainguard opentelemetry-collector-contrib-fips —
opentelemetry-collector-fips affected Chainguard opentelemetry-collector-fips —
opentelemetry-collector-ocb-fips affected Chainguard opentelemetry-collector-ocb-fips —
paranoia affected Wolfi paranoia —
paranoia affected Chainguard paranoia —
policy-controller affected Chainguard policy-controller —
policy-controller affected Wolfi policy-controller —
policy-controller-fips affected Chainguard policy-controller-fips —
policy-controller-tester affected Wolfi policy-controller-tester —
policy-controller-tester affected Chainguard policy-controller-tester —
policy-controller-tester-fips affected Chainguard policy-controller-tester-fips —
policy-controller-webhook affected Chainguard policy-controller-webhook —
policy-controller-webhook affected Wolfi policy-controller-webhook —
prometheus-2.51 affected Chainguard prometheus-2.51 —
prometheus-2.51 affected Wolfi prometheus-2.51 —
prometheus-2.51-bitnami-compat affected Wolfi prometheus-2.51-bitnami-compat —
prometheus-2.51-bitnami-compat affected Chainguard prometheus-2.51-bitnami-compat —
prometheus-2.53 affected Wolfi prometheus-2.53 —
prometheus-2.53 affected Chainguard prometheus-2.53 —
prometheus-2.53-bitnami-compat affected Wolfi prometheus-2.53-bitnami-compat —
prometheus-2.53-bitnami-compat affected Chainguard prometheus-2.53-bitnami-compat —
prometheus-2.53-iamguarded-compat affected Chainguard prometheus-2.53-iamguarded-compat —
prometheus-2.54 affected Chainguard prometheus-2.54 —
prometheus-2.54 affected Wolfi prometheus-2.54 —
prometheus-2.54-bitnami-compat affected Chainguard prometheus-2.54-bitnami-compat —
prometheus-2.54-bitnami-compat affected Wolfi prometheus-2.54-bitnami-compat —
prometheus-fips affected Chainguard prometheus-fips —
prometheus-fips-2.53 affected Chainguard prometheus-fips-2.53 —
prometheus-fips-2.53-iamguarded-compat affected Chainguard prometheus-fips-2.53-iamguarded-compat —
rancher-2.10 affected Wolfi rancher-2.10 —
rancher-2.10 affected Chainguard rancher-2.10 —
rancher-agent-2.10 affected Wolfi rancher-agent-2.10 —
rancher-agent-2.10 affected Chainguard rancher-agent-2.10 —
rancher-agent-2.11 affected Chainguard rancher-agent-2.11 —
rancher-agent-2.11 affected Wolfi rancher-agent-2.11 —
rancher-agent-2.9 affected Wolfi rancher-agent-2.9 —
rancher-agent-2.9 affected Chainguard rancher-agent-2.9 —
rancher-fleet affected Chainguard rancher-fleet —
rancher-fleet affected Wolfi rancher-fleet —
rancher-fleet-agent affected Wolfi rancher-fleet-agent —
rancher-fleet-agent affected Chainguard rancher-fleet-agent —
rancher-fleet-cli affected Wolfi rancher-fleet-cli —
rancher-fleet-cli affected Chainguard rancher-fleet-cli —
rancher-fleet-controller affected Chainguard rancher-fleet-controller —
rancher-fleet-controller affected Wolfi rancher-fleet-controller —
rancher-fleet-termination-log affected Chainguard rancher-fleet-termination-log —
rancher-fleet-termination-log affected Wolfi rancher-fleet-termination-log —
scorecard affected Chainguard scorecard —
scorecard affected Wolfi scorecard —
skaffold affected Chainguard skaffold —
skaffold affected Wolfi skaffold —
skopeo affected Chainguard skopeo —
skopeo affected Wolfi skopeo —
slsa-verifier affected Chainguard slsa-verifier —
slsa-verifier affected Wolfi slsa-verifier —
syft affected Chainguard syft —
syft affected Wolfi syft —
tekton-chains affected Wolfi tekton-chains —
tekton-chains affected Chainguard tekton-chains —
tekton-chains-fips affected Chainguard tekton-chains-fips —
tekton-pipelines affected Wolfi tekton-pipelines —
tekton-pipelines affected Chainguard tekton-pipelines —
tekton-pipelines-controller-fips affected Chainguard tekton-pipelines-controller-fips —
tekton-pipelines-entrypoint affected Wolfi tekton-pipelines-entrypoint —
tekton-pipelines-entrypoint affected Chainguard tekton-pipelines-entrypoint —
tekton-pipelines-entrypoint-fips affected Chainguard tekton-pipelines-entrypoint-fips —
tekton-pipelines-events affected Wolfi tekton-pipelines-events —
tekton-pipelines-events affected Chainguard tekton-pipelines-events —
tekton-pipelines-events-fips affected Chainguard tekton-pipelines-events-fips —
tekton-pipelines-fips affected Chainguard tekton-pipelines-fips —
tekton-pipelines-nop affected Wolfi tekton-pipelines-nop —
tekton-pipelines-nop affected Chainguard tekton-pipelines-nop —
tekton-pipelines-nop-fips affected Chainguard tekton-pipelines-nop-fips —
tekton-pipelines-resolvers affected Chainguard tekton-pipelines-resolvers —
tekton-pipelines-resolvers affected Wolfi tekton-pipelines-resolvers —
tekton-pipelines-resolvers-fips affected Chainguard tekton-pipelines-resolvers-fips —
tekton-pipelines-sidecarlogresults affected Wolfi tekton-pipelines-sidecarlogresults —
tekton-pipelines-sidecarlogresults affected Chainguard tekton-pipelines-sidecarlogresults —
tekton-pipelines-sidecarlogresults-fips affected Chainguard tekton-pipelines-sidecarlogresults-fips —
tekton-pipelines-webhook affected Wolfi tekton-pipelines-webhook —
tekton-pipelines-webhook affected Chainguard tekton-pipelines-webhook —
tekton-pipelines-webhook-fips affected Chainguard tekton-pipelines-webhook-fips —
tekton-pipelines-workingdirinit affected Wolfi tekton-pipelines-workingdirinit —
tekton-pipelines-workingdirinit affected Chainguard tekton-pipelines-workingdirinit —
tekton-pipelines-workingdirinit-fips affected Chainguard tekton-pipelines-workingdirinit-fips —
telegraf-1.30 affected Chainguard telegraf-1.30 —
telegraf-1.30 affected Wolfi telegraf-1.30 —
telegraf-1.31 affected Wolfi telegraf-1.31 —
telegraf-1.31 affected Chainguard telegraf-1.31 —
teleport affected Wolfi teleport —
teleport affected Chainguard teleport —
timoni affected Wolfi timoni —
timoni affected Chainguard timoni —
tkn affected Wolfi tkn —
tkn affected Chainguard tkn —
tkn-fips affected Chainguard tkn-fips —
traefik-3.0 affected Chainguard traefik-3.0 —
traefik-3.0 affected Wolfi traefik-3.0 —
traefik-3.1 affected Wolfi traefik-3.1 —
traefik-3.1 affected Chainguard traefik-3.1 —
traefik-fips-2.11 affected Chainguard traefik-fips-2.11 —
traefik-fips-3.0 affected Chainguard traefik-fips-3.0 —
traefik-fips-3.1 affected Chainguard traefik-fips-3.1 —
trivy affected Chainguard trivy —
trivy affected Wolfi trivy —
trivy-fips affected Chainguard trivy-fips —
up affected Wolfi up —
up affected Chainguard up —
vault-1.17 affected Chainguard vault-1.17 —
vault-fips-1.15 affected Chainguard vault-fips-1.15 —
vault-fips-1.15-compat affected Chainguard vault-fips-1.15-compat —
vault-fips-1.17 affected Chainguard vault-fips-1.17 —
vault-fips-1.17-compat affected Chainguard vault-fips-1.17-compat —
vcluster affected Chainguard vcluster —
vcluster affected Wolfi vcluster —
vcluster-cli affected Chainguard vcluster-cli —
vcluster-cli affected Wolfi vcluster-cli —
vcluster-syncer affected Wolfi vcluster-syncer —
vcluster-syncer affected Chainguard vcluster-syncer —
vexctl affected Chainguard vexctl —
vexctl affected Wolfi vexctl —
wolfictl affected Chainguard wolfictl —
wolfictl affected Wolfi wolfictl —
zarf affected Chainguard zarf —
zarf affected Wolfi zarf —
zot affected Wolfi zot —
zot affected Chainguard zot —
Upstream advisory

CGA-47jp-hr2c-6c58

Open SourcePoC exploit2026-01-29

CGA-47jp-hr2c-6c58

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
chromium-qt affected Chainguard chromium-qt —
chromium-qt affected Wolfi chromium-qt —
Upstream advisory

CGA-f6hj-43fw-pg4w

Open SourcePoC exploit2026-01-28

CGA-f6hj-43fw-pg4w

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Wolfi chromium —
chromium affected Chainguard chromium —
chromium-docker-selenium-compat affected Chainguard chromium-docker-selenium-compat —
chromium-docker-selenium-compat affected Wolfi chromium-docker-selenium-compat —
chromium-lang affected Chainguard chromium-lang —
chromium-lang affected Wolfi chromium-lang —
Upstream advisory

CGA-33r6-gv35-447j

Open SourcePoC exploit2026-01-29

CGA-33r6-gv35-447j

Affected products

ProductStatusVendorPackageEcosystem
aws-ebs-csi-driver-1.18 affected Chainguard aws-ebs-csi-driver-1.18 —
aws-efs-csi-driver-fips affected Chainguard aws-efs-csi-driver-fips —
aws-efs-csi-driver-fips-1.6 affected Chainguard aws-efs-csi-driver-fips-1.6 —
calico-cni-fips-3.25-compat affected Chainguard calico-cni-fips-3.25-compat —
calico-cni-fips-compat affected Chainguard calico-cni-fips-compat —
calicoctl-fips affected Chainguard calicoctl-fips —
calicoctl-fips-3.25 affected Chainguard calicoctl-fips-3.25 —
calico-fips affected Chainguard calico-fips —
calico-fips-3.25 affected Chainguard calico-fips-3.25 —
calico-fips-apiserver affected Chainguard calico-fips-apiserver —
calico-fips-apiserver-3.25 affected Chainguard calico-fips-apiserver-3.25 —
calico-fips-app-policy affected Chainguard calico-fips-app-policy —
calico-fips-app-policy-3.25 affected Chainguard calico-fips-app-policy-3.25 —
calico-fips-cni affected Chainguard calico-fips-cni —
calico-fips-cni-3.25 affected Chainguard calico-fips-cni-3.25 —
calico-fips-felix affected Chainguard calico-fips-felix —
calico-fips-felix-3.25 affected Chainguard calico-fips-felix-3.25 —
calico-fips-key-cert-provisioner affected Chainguard calico-fips-key-cert-provisioner —
calico-fips-kube-controllers affected Chainguard calico-fips-kube-controllers —
calico-fips-kube-controllers-3.25 affected Chainguard calico-fips-kube-controllers-3.25 —
calico-fips-node affected Chainguard calico-fips-node —
calico-fips-node-3.25 affected Chainguard calico-fips-node-3.25 —
calico-fips-pod2daemon affected Chainguard calico-fips-pod2daemon —
calico-fips-pod2daemon-3.25 affected Chainguard calico-fips-pod2daemon-3.25 —
calico-fips-typha-client affected Chainguard calico-fips-typha-client —
calico-fips-typha-client-3.25 affected Chainguard calico-fips-typha-client-3.25 —
calico-fips-typhad affected Chainguard calico-fips-typhad —
calico-fips-typhad-3.25 affected Chainguard calico-fips-typhad-3.25 —
cluster-autoscaler-fips-1.25 affected Chainguard cluster-autoscaler-fips-1.25 —
cluster-autoscaler-fips-1.25-compat affected Chainguard cluster-autoscaler-fips-1.25-compat —
kubeflow-pipelines affected Chainguard kubeflow-pipelines —
kubeflow-pipelines affected Wolfi kubeflow-pipelines —
kubeflow-pipelines-apiserver affected Wolfi kubeflow-pipelines-apiserver —
kubeflow-pipelines-apiserver affected Chainguard kubeflow-pipelines-apiserver —
kubeflow-pipelines-cache-deployer affected Chainguard kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer affected Wolfi kubeflow-pipelines-cache-deployer —
kubeflow-pipelines-cache-deployer-compat affected Wolfi kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache-deployer-compat affected Chainguard kubeflow-pipelines-cache-deployer-compat —
kubeflow-pipelines-cache_server affected Wolfi kubeflow-pipelines-cache_server —
kubeflow-pipelines-cache_server affected Chainguard kubeflow-pipelines-cache_server —
kubeflow-pipelines-frontend affected Chainguard kubeflow-pipelines-frontend —
kubeflow-pipelines-frontend affected Wolfi kubeflow-pipelines-frontend —
kubeflow-pipelines-metadata-envoy-config affected Chainguard kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-envoy-config affected Wolfi kubeflow-pipelines-metadata-envoy-config —
kubeflow-pipelines-metadata-writer affected Wolfi kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer affected Chainguard kubeflow-pipelines-metadata-writer —
kubeflow-pipelines-metadata-writer-compat affected Chainguard kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-metadata-writer-compat affected Wolfi kubeflow-pipelines-metadata-writer-compat —
kubeflow-pipelines-persistence_agent affected Wolfi kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-persistence_agent affected Chainguard kubeflow-pipelines-persistence_agent —
kubeflow-pipelines-scheduledworkflow affected Wolfi kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-scheduledworkflow affected Chainguard kubeflow-pipelines-scheduledworkflow —
kubeflow-pipelines-viewer-crd-controller affected Chainguard kubeflow-pipelines-viewer-crd-controller —
kubeflow-pipelines-viewer-crd-controller affected Wolfi kubeflow-pipelines-viewer-crd-controller —
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
nodetaint affected Wolfi nodetaint —
nodetaint affected Chainguard nodetaint —
sparkctl affected Wolfi sparkctl —
sparkctl affected Chainguard sparkctl —
spark-operator affected Wolfi spark-operator —
spark-operator affected Chainguard spark-operator —
spark-operator-oci-entrypoint affected Chainguard spark-operator-oci-entrypoint —
spark-operator-oci-entrypoint affected Wolfi spark-operator-oci-entrypoint —
Upstream advisory

CGA-7cxc-jjj5-xqf3

Open SourcePoC exploit2026-01-28

CGA-7cxc-jjj5-xqf3

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-828p-4xp8-m457

GooglePoC exploit2026-01-28

CGA-828p-4xp8-m457

Affected products

ProductStatusVendorPackageEcosystem
trino affected Wolfi trino —
trino affected Chainguard trino —
trino-config affected Chainguard trino-config —
trino-config affected Wolfi trino-config —
trino-oci-entrypoint affected Chainguard trino-oci-entrypoint —
trino-oci-entrypoint affected Wolfi trino-oci-entrypoint —
trino-plugin-accumulo affected Chainguard trino-plugin-accumulo —
trino-plugin-accumulo affected Wolfi trino-plugin-accumulo —
trino-plugin-atop affected Wolfi trino-plugin-atop —
trino-plugin-atop affected Chainguard trino-plugin-atop —
trino-plugin-bigquery affected Chainguard trino-plugin-bigquery —
trino-plugin-bigquery affected Wolfi trino-plugin-bigquery —
trino-plugin-blackhole affected Wolfi trino-plugin-blackhole —
trino-plugin-blackhole affected Chainguard trino-plugin-blackhole —
trino-plugin-cassandra affected Chainguard trino-plugin-cassandra —
trino-plugin-cassandra affected Wolfi trino-plugin-cassandra —
trino-plugin-clickhouse affected Wolfi trino-plugin-clickhouse —
trino-plugin-clickhouse affected Chainguard trino-plugin-clickhouse —
trino-plugin-delta-lake affected Chainguard trino-plugin-delta-lake —
trino-plugin-delta-lake affected Wolfi trino-plugin-delta-lake —
trino-plugin-druid affected Chainguard trino-plugin-druid —
trino-plugin-druid affected Wolfi trino-plugin-druid —
trino-plugin-elasticsearch affected Chainguard trino-plugin-elasticsearch —
trino-plugin-elasticsearch affected Wolfi trino-plugin-elasticsearch —
trino-plugin-example-http affected Wolfi trino-plugin-example-http —
trino-plugin-example-http affected Chainguard trino-plugin-example-http —
trino-plugin-exchange-filesystem affected Wolfi trino-plugin-exchange-filesystem —
trino-plugin-exchange-filesystem affected Chainguard trino-plugin-exchange-filesystem —
trino-plugin-exchange-hdfs affected Wolfi trino-plugin-exchange-hdfs —
trino-plugin-exchange-hdfs affected Chainguard trino-plugin-exchange-hdfs —
trino-plugin-geospatial affected Chainguard trino-plugin-geospatial —
trino-plugin-geospatial affected Wolfi trino-plugin-geospatial —
trino-plugin-google-sheets affected Chainguard trino-plugin-google-sheets —
trino-plugin-google-sheets affected Wolfi trino-plugin-google-sheets —
trino-plugin-hive affected Chainguard trino-plugin-hive —
trino-plugin-hive affected Wolfi trino-plugin-hive —
trino-plugin-http-event-listener affected Chainguard trino-plugin-http-event-listener —
trino-plugin-http-event-listener affected Wolfi trino-plugin-http-event-listener —
trino-plugin-hudi affected Wolfi trino-plugin-hudi —
trino-plugin-hudi affected Chainguard trino-plugin-hudi —
trino-plugin-iceberg affected Chainguard trino-plugin-iceberg —
trino-plugin-iceberg affected Wolfi trino-plugin-iceberg —
trino-plugin-ignite affected Wolfi trino-plugin-ignite —
trino-plugin-ignite affected Chainguard trino-plugin-ignite —
trino-plugin-jmx affected Wolfi trino-plugin-jmx —
trino-plugin-jmx affected Chainguard trino-plugin-jmx —
trino-plugin-kafka affected Wolfi trino-plugin-kafka —
trino-plugin-kafka affected Chainguard trino-plugin-kafka —
trino-plugin-kinesis affected Chainguard trino-plugin-kinesis —
trino-plugin-kinesis affected Wolfi trino-plugin-kinesis —
trino-plugin-kudu affected Chainguard trino-plugin-kudu —
trino-plugin-kudu affected Wolfi trino-plugin-kudu —
trino-plugin-local-file affected Chainguard trino-plugin-local-file —
trino-plugin-local-file affected Wolfi trino-plugin-local-file —
trino-plugin-mariadb affected Wolfi trino-plugin-mariadb —
trino-plugin-mariadb affected Chainguard trino-plugin-mariadb —
trino-plugin-memory affected Wolfi trino-plugin-memory —
trino-plugin-memory affected Chainguard trino-plugin-memory —
trino-plugin-ml affected Wolfi trino-plugin-ml —
trino-plugin-ml affected Chainguard trino-plugin-ml —
trino-plugin-mongodb affected Wolfi trino-plugin-mongodb —
trino-plugin-mongodb affected Chainguard trino-plugin-mongodb —
trino-plugin-mysql affected Chainguard trino-plugin-mysql —
trino-plugin-mysql affected Wolfi trino-plugin-mysql —
trino-plugin-mysql-event-listener affected Chainguard trino-plugin-mysql-event-listener —
trino-plugin-mysql-event-listener affected Wolfi trino-plugin-mysql-event-listener —
trino-plugin-oracle affected Wolfi trino-plugin-oracle —
trino-plugin-oracle affected Chainguard trino-plugin-oracle —
trino-plugin-password-authenticators affected Wolfi trino-plugin-password-authenticators —
trino-plugin-password-authenticators affected Chainguard trino-plugin-password-authenticators —
trino-plugin-pinot affected Wolfi trino-plugin-pinot —
trino-plugin-pinot affected Chainguard trino-plugin-pinot —
trino-plugin-postgresql affected Chainguard trino-plugin-postgresql —
trino-plugin-postgresql affected Wolfi trino-plugin-postgresql —
trino-plugin-prometheus affected Chainguard trino-plugin-prometheus —
trino-plugin-prometheus affected Wolfi trino-plugin-prometheus —
trino-plugin-raptor-legacy affected Wolfi trino-plugin-raptor-legacy —
trino-plugin-raptor-legacy affected Chainguard trino-plugin-raptor-legacy —
trino-plugin-redis affected Chainguard trino-plugin-redis —
trino-plugin-redis affected Wolfi trino-plugin-redis —
trino-plugin-redshift affected Chainguard trino-plugin-redshift —
trino-plugin-redshift affected Wolfi trino-plugin-redshift —
trino-plugin-resource-group-managers affected Chainguard trino-plugin-resource-group-managers —
trino-plugin-resource-group-managers affected Wolfi trino-plugin-resource-group-managers —
trino-plugin-session-property-managers affected Chainguard trino-plugin-session-property-managers —
trino-plugin-session-property-managers affected Wolfi trino-plugin-session-property-managers —
trino-plugin-singlestore affected Chainguard trino-plugin-singlestore —
trino-plugin-singlestore affected Wolfi trino-plugin-singlestore —
trino-plugin-sqlserver affected Chainguard trino-plugin-sqlserver —
trino-plugin-sqlserver affected Wolfi trino-plugin-sqlserver —
trino-plugin-teradata-functions affected Chainguard trino-plugin-teradata-functions —
trino-plugin-teradata-functions affected Wolfi trino-plugin-teradata-functions —
trino-plugin-thrift affected Chainguard trino-plugin-thrift —
trino-plugin-thrift affected Wolfi trino-plugin-thrift —
trino-plugin-tpcds affected Wolfi trino-plugin-tpcds —
trino-plugin-tpcds affected Chainguard trino-plugin-tpcds —
trino-plugin-tpch affected Chainguard trino-plugin-tpch —
trino-plugin-tpch affected Wolfi trino-plugin-tpch —
Upstream advisory

CGA-xg4p-7g75-3mrj

Open SourcePoC exploit2026-01-28

CGA-xg4p-7g75-3mrj

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
Upstream advisory

CGA-wx29-25j7-h25w

Open SourcePoC exploit2026-01-28

CGA-wx29-25j7-h25w

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.28 affected Chainguard kubeadm-1.28 —
kubeadm-1.28 affected Wolfi kubeadm-1.28 —
kubeadm-1.28-default affected Chainguard kubeadm-1.28-default —
kubeadm-1.28-default affected Wolfi kubeadm-1.28-default —
kube-apiserver-1.28 affected Wolfi kube-apiserver-1.28 —
kube-apiserver-1.28 affected Chainguard kube-apiserver-1.28 —
kube-apiserver-1.28-default affected Chainguard kube-apiserver-1.28-default —
kube-apiserver-1.28-default affected Wolfi kube-apiserver-1.28-default —
kube-controller-manager-1.28 affected Chainguard kube-controller-manager-1.28 —
kube-controller-manager-1.28 affected Wolfi kube-controller-manager-1.28 —
kube-controller-manager-1.28-default affected Wolfi kube-controller-manager-1.28-default —
kube-controller-manager-1.28-default affected Chainguard kube-controller-manager-1.28-default —
kubectl-1.28 affected Wolfi kubectl-1.28 —
kubectl-1.28 affected Chainguard kubectl-1.28 —
kubectl-1.28-default affected Chainguard kubectl-1.28-default —
kubectl-1.28-default affected Wolfi kubectl-1.28-default —
kubectl-bash-completion-1.28 affected Chainguard kubectl-bash-completion-1.28 —
kubectl-bash-completion-1.28 affected Wolfi kubectl-bash-completion-1.28 —
kubelet-1.28 affected Chainguard kubelet-1.28 —
kubelet-1.28 affected Wolfi kubelet-1.28 —
kubelet-1.28-default affected Chainguard kubelet-1.28-default —
kubelet-1.28-default affected Wolfi kubelet-1.28-default —
kube-proxy-1.28 affected Wolfi kube-proxy-1.28 —
kube-proxy-1.28 affected Chainguard kube-proxy-1.28 —
kube-proxy-1.28-default affected Chainguard kube-proxy-1.28-default —
kube-proxy-1.28-default affected Wolfi kube-proxy-1.28-default —
kubernetes-1.28 affected Chainguard kubernetes-1.28 —
kubernetes-1.28 affected Wolfi kubernetes-1.28 —
kubernetes-1.28-default affected Wolfi kubernetes-1.28-default —
kubernetes-1.28-default affected Chainguard kubernetes-1.28-default —
kube-scheduler-1.28 affected Wolfi kube-scheduler-1.28 —
kube-scheduler-1.28 affected Chainguard kube-scheduler-1.28 —
kube-scheduler-1.28-default affected Chainguard kube-scheduler-1.28-default —
kube-scheduler-1.28-default affected Wolfi kube-scheduler-1.28-default —
Upstream advisory

CGA-rp62-xxwr-3hxg

Open SourcePoC exploit2026-01-28

CGA-rp62-xxwr-3hxg

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.31 affected Chainguard kubeadm-1.31 —
kubeadm-1.31-default affected Chainguard kubeadm-1.31-default —
kube-apiserver-1.31 affected Chainguard kube-apiserver-1.31 —
kube-apiserver-1.31-default affected Chainguard kube-apiserver-1.31-default —
kube-controller-manager-1.31 affected Chainguard kube-controller-manager-1.31 —
kube-controller-manager-1.31-default affected Chainguard kube-controller-manager-1.31-default —
kubectl-1.31 affected Chainguard kubectl-1.31 —
kubectl-1.31-bitnami-compat affected Chainguard kubectl-1.31-bitnami-compat —
kubectl-1.31-default affected Chainguard kubectl-1.31-default —
kubectl-bash-completion-1.31 affected Chainguard kubectl-bash-completion-1.31 —
kubelet-1.31 affected Chainguard kubelet-1.31 —
kubelet-1.31-default affected Chainguard kubelet-1.31-default —
kube-proxy-1.31 affected Chainguard kube-proxy-1.31 —
kube-proxy-1.31-default affected Chainguard kube-proxy-1.31-default —
kube-proxy-1.31-default-compat affected Chainguard kube-proxy-1.31-default-compat —
kubernetes-1.31 affected Chainguard kubernetes-1.31 —
kubernetes-1.31-default affected Chainguard kubernetes-1.31-default —
kubernetes-pause-1.31 affected Chainguard kubernetes-pause-1.31 —
kubernetes-pause-compat-1.31 affected Chainguard kubernetes-pause-compat-1.31 —
kube-scheduler-1.31 affected Chainguard kube-scheduler-1.31 —
kube-scheduler-1.31-default affected Chainguard kube-scheduler-1.31-default —
Upstream advisory

CGA-vch7-r78w-fxrc

Open SourcePoC exploit2026-01-28

CGA-vch7-r78w-fxrc

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.24 affected Chainguard kubernetes-1.24 —
Upstream advisory

CGA-rq48-3cc5-xc5v

Open SourcePoC exploit2026-01-28

CGA-rq48-3cc5-xc5v

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-dns-node-cache-1.17 affected Chainguard kubernetes-dns-node-cache-1.17 —
Upstream advisory

CGA-qh76-5jhm-h597

Open SourcePoC exploit2026-01-28

CGA-qh76-5jhm-h597

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.26 affected Chainguard kubernetes-1.26 —
kubernetes-1.26 affected Wolfi kubernetes-1.26 —
Upstream advisory

CGA-gv27-hj6h-mmvc

Open SourcePoC exploit2026-01-28

CGA-gv27-hj6h-mmvc

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.30 affected Chainguard kubeadm-1.30 —
kubeadm-1.30-default affected Chainguard kubeadm-1.30-default —
kube-apiserver-1.30 affected Chainguard kube-apiserver-1.30 —
kube-apiserver-1.30-default affected Chainguard kube-apiserver-1.30-default —
kube-controller-manager-1.30 affected Chainguard kube-controller-manager-1.30 —
kube-controller-manager-1.30-default affected Chainguard kube-controller-manager-1.30-default —
kubectl-1.30 affected Chainguard kubectl-1.30 —
kubectl-1.30-bitnami-compat affected Chainguard kubectl-1.30-bitnami-compat —
kubectl-1.30-default affected Chainguard kubectl-1.30-default —
kubectl-bash-completion-1.30 affected Chainguard kubectl-bash-completion-1.30 —
kubelet-1.30 affected Chainguard kubelet-1.30 —
kubelet-1.30-default affected Chainguard kubelet-1.30-default —
kube-proxy-1.30 affected Chainguard kube-proxy-1.30 —
kube-proxy-1.30-default affected Chainguard kube-proxy-1.30-default —
kube-proxy-1.30-default-compat affected Chainguard kube-proxy-1.30-default-compat —
kubernetes-1.30 affected Chainguard kubernetes-1.30 —
kubernetes-1.30-default affected Chainguard kubernetes-1.30-default —
kubernetes-pause-1.30 affected Chainguard kubernetes-pause-1.30 —
kubernetes-pause-compat-1.30 affected Chainguard kubernetes-pause-compat-1.30 —
kube-scheduler-1.30 affected Chainguard kube-scheduler-1.30 —
kube-scheduler-1.30-default affected Chainguard kube-scheduler-1.30-default —
Upstream advisory

CGA-g94q-7p3f-f6h2

Open SourcePoC exploit2026-01-28

CGA-g94q-7p3f-f6h2

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.22 affected Chainguard kubernetes-1.22 —
Upstream advisory

CGA-9fqj-jmfp-jj9w

Open SourcePoC exploit2026-01-28

CGA-9fqj-jmfp-jj9w

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
Upstream advisory

CGA-9q2h-9p35-mwq8

Open SourcePoC exploit2026-01-28

CGA-9q2h-9p35-mwq8

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.21 affected Chainguard kubernetes-1.21 —
Upstream advisory

CGA-9m78-g66h-96rc

Open SourcePoC exploit2026-01-28

CGA-9m78-g66h-96rc

Affected products

ProductStatusVendorPackageEcosystem
kubeadm-1.29 affected Chainguard kubeadm-1.29 —
kubeadm-1.29-default affected Chainguard kubeadm-1.29-default —
kube-apiserver-1.29 affected Chainguard kube-apiserver-1.29 —
kube-apiserver-1.29-default affected Chainguard kube-apiserver-1.29-default —
kube-controller-manager-1.29 affected Chainguard kube-controller-manager-1.29 —
kube-controller-manager-1.29-default affected Chainguard kube-controller-manager-1.29-default —
kubectl-1.29 affected Chainguard kubectl-1.29 —
kubectl-1.29-bitnami-compat affected Chainguard kubectl-1.29-bitnami-compat —
kubectl-1.29-default affected Chainguard kubectl-1.29-default —
kubectl-bash-completion-1.29 affected Chainguard kubectl-bash-completion-1.29 —
kubelet-1.29 affected Chainguard kubelet-1.29 —
kubelet-1.29-default affected Chainguard kubelet-1.29-default —
kube-proxy-1.29 affected Chainguard kube-proxy-1.29 —
kube-proxy-1.29-default affected Chainguard kube-proxy-1.29-default —
kube-proxy-1.29-default-compat affected Chainguard kube-proxy-1.29-default-compat —
kubernetes-1.29 affected Chainguard kubernetes-1.29 —
kubernetes-1.29-default affected Chainguard kubernetes-1.29-default —
kubernetes-pause-1.29 affected Chainguard kubernetes-pause-1.29 —
kubernetes-pause-compat-1.29 affected Chainguard kubernetes-pause-compat-1.29 —
kube-scheduler-1.29 affected Chainguard kube-scheduler-1.29 —
kube-scheduler-1.29-default affected Chainguard kube-scheduler-1.29-default —
Upstream advisory

CGA-47q8-j9pq-jp67

Open SourcePoC exploit2026-01-28

CGA-47q8-j9pq-jp67

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.23 affected Chainguard kubernetes-1.23 —
Upstream advisory

CGA-32mx-cg74-rfpj

Open SourcePoC exploit2026-01-28

CGA-32mx-cg74-rfpj

Affected products

ProductStatusVendorPackageEcosystem
kubernetes-1.27 affected Wolfi kubernetes-1.27 —
kubernetes-1.27 affected Chainguard kubernetes-1.27 —
Upstream advisory

MINI-9gv3-q5w9-g939

Open SourcePoC exploit2026-01-14

MINI-9gv3-q5w9-g939

Affected products

ProductStatusVendorPackageEcosystem
kube-apiserver-fips-1.35 affected MinimOS kube-apiserver-fips-1.35 —
kube-apiserver-fips-1.35-compat affected MinimOS kube-apiserver-fips-1.35-compat —