Chainguard, Inc. — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by Chainguard, Inc. (chainguard). https://vulnogram.org/seaview/icons/chainguard.png Chainguard, Inc. — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT CVE-2026-105768 · 6.3 MEDIUM 🌩️ — apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root https://vulnogram.org/CVE-2026-105768 https://vulnogram.org/CVE-2026-105768 apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group entries with… Medium Network Exploitable Mon, 05 Oct 2026 20:17:46 GMT CVE-2026-105767 · 3.3 LOW — Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands https://vulnogram.org/CVE-2026-105767 https://vulnogram.org/CVE-2026-105767 Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a… Low Mon, 05 Oct 2026 19:48:47 GMT CVE-2026-105766 · 3.1 LOW 🌩️ ☁️ — Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP https://vulnogram.org/CVE-2026-105766 https://vulnogram.org/CVE-2026-105766 Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-pat… Low Network Exploitable Cloud Hosted Mon, 05 Oct 2026 19:45:50 GMT