Log in Start free

Chainguard

Products

ProductCVEsExploitedLatest
Chainguard Academy (edu)2–Oct 5, 2026
kaniko1–Nov 2, 2026
MinIO1–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-122267 High 8.8 MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read. 0.2%
  • CVE-2026-105769 Critical 9.3 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts 0.2%
  • CVE-2026-105767 Low 3.3 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands 0.2%
  • CVE-2026-105766 Low 3.1 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP 0.1%