Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-w7v6-p5fq-h93c	CVE-2026-100354	Unknown	grafana-fips-13.2	Fixed
CGA-wqrv-9h3j-fqq4	CVE-2026-100347	Unknown	grafana-fips-13.2	Fixed
CGA-cpvh-q632-r5p2	CVE-2026-100347	Unknown	crossplane-provider-aws-datapipeline-fips	Fixed
CGA-cg7h-3wvr-54gw	CVE-2026-100351	Unknown	grafana-fips-13.2	Fixed
CGA-9hfw-8fw8-4mp4	CVE-2026-100351	Unknown	crossplane-provider-aws-datapipeline-fips	Fixed
CGA-6j6g-h3mq-24vv	CVE-2026-100353	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-v7wx-mwh2-4565	CVE-2026-100352	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-xmj2-gq3p-rvc5	CVE-2026-100348	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-hf3h-9w4r-4v23	CVE-2026-100354	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-qv5c-rpv4-62mx	CVE-2026-100347	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-2585-v7cm-2364	CVE-2026-100351	Unknown	crossplane-aws-monolith-fips	Under investigation
CGA-769m-hf4x-hm8h	CVE-2026-85747	Unknown	commercial-kyvernopre-1.15	Pending upstream fix
CGA-gr6c-pq64-j2fv	CVE-2026-85747	Unknown	commercial-kyverno-reports-controller-1.15	Pending upstream fix
CGA-q4qp-qgqx-r3hh	CVE-2026-100353	Unknown	crossplane-provider-azure-operationsmanagement	Under investigation
CGA-9m3q-hw48-m9pg	CVE-2026-100352	Unknown	crossplane-provider-azure-operationsmanagement	Under investigation
CGA-hvvv-928h-65cg	CVE-2026-100348	Unknown	crossplane-provider-azure-operationsmanagement	Under investigation

1,412,768 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company