C
Vendor security profile
chainguard
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%75
Avg. CVSS4.2
12-month vulnerability rate
0
0
0
1
1
0
0
0
0
0
0
2
CVE KEV
CVE severity distribution
4toplam CVE
High1 (25%)
Medium1 (25%)
Low2 (50%)
Patch and exploitation view
%75
Verified patch
%0
CISA KEV
%0
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
6.3
CVE-2026-105768
apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root
C
Patch verifiedEPSS %0
2.1
CVE-2026-105767
Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
C
Patch verifiedEPSS %0
2.3
CVE-2026-105766
Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP
C
Patch verifiedEPSS %0
8.3
CVE-2026-54174
melange: Incomplete package integrity verification allows data section substitution
C
Patch verifiedEPSS %0
4.3
CVE-2026-29049
Uncontrolled resource consumption in Chainguard Melange
C
Patch status unknownEPSS %0
8.2
CVE-2026-28406
Path traversal in Chainguard Kaniko
C
Patch verifiedEPSS %1