github.com/chainguard-dev/kaniko
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts | github.com/chainguard-dev/kaniko | Go | Critical | Fix reported | |
| kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories | github.com/chainguard-dev/kaniko | Go | High | Fix reported |