commercial-chainloop-clipackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-39831 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39833 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39834 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39829 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-46597 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-44973 | High | github.com/go-git/go-billy/v6 | v6.0.0-20260328065524-593ae452e14d | ||
CVE-2026-44973 | High | github.com/go-git/go-billy/v5 | v5.8.0 | ||
CVE-2026-45022 | High | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-39830 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39828 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-45022 | High | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-39821 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-46595 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39832 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39835 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-42508 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-48702 | High | github.com/sigstore/rekor | v1.5.0 | ||
CVE-2026-25681 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-27136 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-45571 | Medium | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-42502 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-39827 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-6993 | Medium | github.com/go-kratos/kratos/v2 | v2.7.3 | ||
CVE-2026-46598 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-45571 | Medium | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-25680 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-44740 | Medium | github.com/go-git/go-billy/v5 | v5.8.0 | ||
GHSA-pmwq-pjrm-6p5r | Medium | github.com/in-toto/in-toto-golang | v0.9.0 | ||
GHSA-w5pp-99ch-qj29 | Medium | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-44740 | Medium | github.com/go-git/go-billy/v6 | v6.0.0-20260328065524-593ae452e14d | ||
CVE-2026-39395 | Medium | github.com/sigstore/cosign/v3 | v3.0.4 | ||
CVE-2026-49835 | Medium | github.com/sigstore/timestamp-authority/v2 | v2.0.6 | ||
CVE-2026-42506 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-39395 | Medium | github.com/sigstore/cosign/v2 | v2.6.2 | ||
GHSA-w5pp-99ch-qj29 | Medium | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-45570 | Low | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-45570 | Low | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-24122 | Low | github.com/sigstore/cosign/v3 | v3.0.4 | ||
CVE-2026-24122 | Low | github.com/sigstore/cosign/v2 | v2.6.2 | ||
GO-2026-5547 | Unknown | github.com/in-toto/in-toto-golang | v0.9.0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.