Vulnerabilities of chainguard-forks kaniko
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-105769 | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an… | 9.3 Critical | Nov 2, 2026 |
| CVE-2026-28406 | kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster | 8.2 High | Feb 27, 2026 |