HIGH8.2Go
GHSA-6rxq-q92g-4rmf· CVE-2026-28406, GO-2026-4580kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories
Modified: 3/23/2026
package
Go/github.com/chainguard-dev/kaniko
pkg:go/github.com/chainguard-dev/kaniko
—Go
GO-2026-4580· CVE-2026-28406, GHSA-6rxq-q92g-4rmfkaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko
Modified: 3/23/2026