commercial-kyvernopackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-39833 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-39830 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-46595 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-39832 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-42508 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-39834 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-39831 | Critical | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-33814 | High | stdlib | go1.26.2 | ||
CVE-2026-41323 | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
GHSA-hrxh-6v49-42gf | High | google.golang.org/grpc | v1.80.0 | ||
CVE-2026-33811 | High | stdlib | go1.26.2 | ||
CVE-2026-39821 | High | golang.org/x/net | v0.52.0 | ||
CVE-2026-39822 | High | stdlib | go1.26.2 | ||
CVE-2026-42504 | High | stdlib | go1.26.2 | ||
CVE-2026-46600 | High | stdlib | go1.26.2 | ||
CVE-2026-40868 | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
CVE-2026-46600 | High | golang.org/x/net | v0.52.0 | ||
CVE-2026-41068 | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
CVE-2026-56853 | High | stdlib | go1.26.2 | ||
CVE-2026-33818 | High | stdlib | go1.26.2 | ||
CVE-2026-56859 | High | stdlib | go1.26.2 | ||
CVE-2026-46597 | High | golang.org/x/crypto | v0.49.0 | ||
GHSA-8wfp-579w-6r25 | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
GHSA-qr4g-8hrp-c4rw | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
CVE-2026-39820 | High | stdlib | go1.26.2 | ||
CVE-2026-4789 | High | github.com/kyverno/kyverno | v1.17.0-n4k | ||
CVE-2026-56865 | High | golang.org/x/mod | v0.33.0 | ||
CVE-2026-42499 | High | stdlib | go1.26.2 | ||
CVE-2026-39836 | High | stdlib | go1.26.2 | ||
CVE-2026-48702 | High | github.com/sigstore/rekor | v1.5.0 | ||
CVE-2026-33814 | High | golang.org/x/net | v0.52.0 | ||
CVE-2026-56862 | High | stdlib | go1.26.2 | ||
CVE-2026-39829 | High | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-49478 | High | github.com/sigstore/fulcio | v1.8.5 | ||
CVE-2026-39821 | High | stdlib | go1.26.2 | ||
CVE-2026-56852 | High | golang.org/x/text | v0.35.0 | ||
CVE-2026-50163 | High | oras.land/oras-go/v2 | v2.6.0 | ||
CVE-2026-50151 | High | oras.land/oras-go/v2 | v2.6.0 | ||
CVE-2026-56864 | High | golang.org/x/mod | v0.33.0 | ||
CVE-2026-27145 | High | stdlib | go1.26.2 | ||
CVE-2026-27136 | Medium | golang.org/x/net | v0.52.0 | ||
GHSA-vh4v-2xq2-g5cg | Medium | oras.land/oras-go/v2 | v2.6.0 | ||
CVE-2026-25680 | Medium | golang.org/x/net | v0.52.0 | ||
CVE-2026-41178 | Medium | go.opentelemetry.io/otel | v1.43.0 | ||
CVE-2026-39826 | Medium | stdlib | go1.26.2 | ||
CVE-2026-42507 | Medium | stdlib | go1.26.2 | ||
CVE-2026-42506 | Medium | golang.org/x/net | v0.52.0 | ||
CVE-2026-39835 | Medium | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-46598 | Medium | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-56858 | Medium | stdlib | go1.26.2 | ||
CVE-2026-49835 | Medium | github.com/sigstore/timestamp-authority/v2 | v2.0.4 | ||
CVE-2026-42502 | Medium | golang.org/x/net | v0.52.0 | ||
CVE-2026-39827 | Medium | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-39984 | Medium | github.com/sigstore/timestamp-authority/v2 | v2.0.4 | ||
CVE-2026-39828 | Medium | golang.org/x/crypto | v0.49.0 | ||
CVE-2026-2303 | Medium | go.mongodb.org/mongo-driver | v1.17.6 | ||
CVE-2026-49834 | Medium | github.com/sigstore/sigstore-go | v1.1.4 | ||
CVE-2026-32952 | Medium | github.com/Azure/go-ntlmssp | v0.0.0-20221128193559-754e69321358 | ||
CVE-2026-39825 | Medium | stdlib | go1.26.2 | ||
CVE-2026-39823 | Medium | stdlib | go1.26.2 | ||
GHSA-gcjh-h69q-9w9g | Medium | github.com/google/cel-go | v0.26.1 | ||
CVE-2026-50162 | Medium | oras.land/oras-go/v2 | v2.6.0 | ||
CVE-2026-56860 | Medium | stdlib | go1.26.2 | ||
CVE-2026-42505 | Medium | stdlib | go1.26.2 | ||
GHSA-pmwq-pjrm-6p5r | Medium | github.com/in-toto/in-toto-golang | v0.10.0 | ||
CVE-2026-25681 | Medium | golang.org/x/net | v0.52.0 | ||
CVE-2026-54787 | Low | github.com/sigstore/sigstore-go | v1.1.4 | ||
CVE-2026-39824 | Low | golang.org/x/sys | v0.42.0 | ||
CVE-2026-48978 | Low | oras.land/oras-go/v2 | v2.6.0 | ||
GO-2026-5777 | Unknown | github.com/go-chi/chi/v5 | v5.2.4 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.49.0 | ||
GO-2026-6225 | Unknown | github.com/chrismellard/docker-credential-acr-env | v0.0.0-20230304212654-82a0ddb27589 | ||
GO-2026-5774 | Unknown | github.com/go-chi/chi/v5 | v5.2.4 | ||
GO-2026-5841 | Unknown | github.com/klauspost/compress | v1.18.2 | ||
GO-2026-5775 | Unknown | github.com/go-chi/chi/v5 | v5.2.4 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.