Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-q283-67wj-7x3c	CVE-2026-56854	Unknown	prometheus-node-exporter-1.4	Not affected
CGA-7vfq-h4wv-25w3	CVE-2026-56854	Unknown	calico-whisker-backend-fips-3.30	Not affected
CGA-28qf-m2wv-grrp	CVE-2026-75803	Unknown	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-mg63-q9j7-j2vp	CVE-2026-63076	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-p349-58q2-rjv5	CVE-2026-56854	Unknown	auditbeat-9.2	Fixed
CGA-958x-74vh-f9fc	CVE-2026-63075	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-j8v9-h49h-crxh	CVE-2026-63074	Medium	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-7g9v-fwv3-968r	CVE-2026-63073	Unknown	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-j9wm-9j95-3c3r	CVE-2026-63072	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-89ch-fw94-ccq4	CVE-2026-54874	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-5fcv-34f6-qrx7	CVE-2026-18798	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-c869-f247-fq3g	CVE-2026-14457	High	openssl-provider-fips-3.6.0-dbg	Under investigation
CGA-qm2v-pfvp-9grv	CVE-2026-56854	Unknown	crossplane-provider-aws-swf	Not affected
CGA-wqrh-gp5c-vrfh	CVE-2026-56854	Unknown	crossplane-provider-aws-rum-fips	Not affected
CGA-cc3p-w9rp-v855	CVE-2026-56854	Unknown	acm-controller	Not affected
CGA-qj9v-hw52-9r52	CVE-2026-56854	Unknown	cloud-sql-proxy-2.21	Not affected

1,095,586 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company