HIGH8.2Go
GHSA-6rxq-q92g-4rmf· CVE-2026-28406, GO-2026-4580kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories
Modified: 3/23/2026
package
pkg:go/github.com/chainguard-dev/kaniko
kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories
Modified: 3/23/2026
kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko
Modified: 3/23/2026