kaniko vulnerabilities

1 known vulnerability in kaniko from Chainguard-forks. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  kaniko: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-28406Feb 27, 2026Chainguard-forks

  kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing th