Vulnerabilities in chainguard
4 resultsCVE-2026-122267HIGHMinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalatEPSS 0.2%CVE-2026-105769CRITICALkaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsEPSS 0.2%CVE-2026-105767LOWChainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commandsEPSS 0.2%CVE-2026-105766LOWChainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTPEPSS 0.1%