chainguard-dev apko

2 known vulnerabilities in chainguard-dev apko, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-105768 CVSS 6.3 medium apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5…
CVE-2026-54174 CVSS 8.3 high melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to…