commercial-chainloop-backendpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-39833 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39831 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2024-41110 | Critical | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-39834 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-42508 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-46599 | High | golang.org/x/image | v0.38.0 | ||
CVE-2026-48702 | High | github.com/sigstore/rekor | v1.5.0 | ||
CVE-2026-39828 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-49478 | High | github.com/sigstore/fulcio | v1.8.5 | ||
CVE-2026-46604 | High | golang.org/x/image | v0.38.0 | ||
CVE-2026-39830 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39829 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39832 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39835 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-42306 | High | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-33813 | High | golang.org/x/image | v0.38.0 | ||
CVE-2026-46601 | High | golang.org/x/image | v0.38.0 | ||
CVE-2026-41567 | High | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-34040 | High | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-46595 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-46597 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-46602 | High | golang.org/x/image | v0.38.0 | ||
CVE-2026-39821 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-39395 | Medium | github.com/sigstore/cosign/v3 | v3.0.4 | ||
CVE-2026-42502 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-25681 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-33812 | Medium | golang.org/x/image | v0.38.0 | ||
CVE-2026-39827 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-41568 | Medium | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-42500 | Medium | golang.org/x/image | v0.38.0 | ||
CVE-2026-46598 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39395 | Medium | github.com/sigstore/cosign/v2 | v2.6.2 | ||
CVE-2026-27136 | Medium | golang.org/x/net | v0.53.0 | ||
GHSA-pmwq-pjrm-6p5r | Medium | github.com/in-toto/in-toto-golang | v0.9.0 | ||
CVE-2026-33997 | Medium | github.com/moby/moby | v26.1.0+incompatible | ||
CVE-2026-49835 | Medium | github.com/sigstore/timestamp-authority/v2 | v2.0.6 | ||
CVE-2026-25680 | Medium | golang.org/x/net | v0.53.0 | ||
GHSA-gxhx-2686-5h9g | Medium | github.com/slack-go/slack | v0.19.0 | ||
CVE-2026-6993 | Medium | github.com/go-kratos/kratos/v2 | v2.7.3 | ||
CVE-2026-42506 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-24122 | Low | github.com/sigstore/cosign/v3 | v3.0.4 | ||
CVE-2026-24122 | Low | github.com/sigstore/cosign/v2 | v2.6.2 | ||
GO-2026-5547 | Unknown | github.com/in-toto/in-toto-golang | v0.9.0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.