Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-c594-qr85-xgm7	CVE-2026-18149	Medium	lerna	Under investigation
CGA-9hcv-m4cp-9pc8	CVE-2026-85008	Low	lerna	Under investigation
CGA-x3f9-jgj7-pw68	CVE-2026-84890	Medium	lerna	Under investigation
CGA-cmxh-pr5x-gp8w	CVE-2026-85024	Medium	lerna	Under investigation
CGA-fv8h-772c-rr35	CVE-2026-84933	Medium	lerna	Under investigation
CGA-3cqr-7mqw-4jx2	CVE-2026-84947	Low	lerna	Under investigation
CGA-fjr3-r67v-r5qm	CVE-2026-84961	High	lerna	Under investigation
CGA-fmm2-mr48-256q	CVE-2026-85014	Medium	lerna	Under investigation
CGA-9jv6-jgwg-ppv4	CVE-2026-19534	High	lerna	Under investigation
CGA-wq6q-m36v-c26p	CVE-2026-18540	Low	lerna	Under investigation
CGA-mvqm-g2mw-qfrx	CVE-2026-18149	Medium	lerna	Under investigation
CGA-9294-8jqm-mf5m	CVE-2026-85008	Low	lerna	Under investigation
CGA-2j46-x9p7-j4g2	CVE-2026-84890	Medium	lerna	Under investigation
CGA-58x7-vg7f-w78f	CVE-2026-85024	Medium	lerna	Under investigation
CGA-c97p-m627-377q	CVE-2026-84933	Medium	lerna	Under investigation
CGA-7p29-m4mv-hrvx	CVE-2026-84947	Low	lerna	Under investigation

1,397,883 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company