commercial-chainloop-clipackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-39834 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39831 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-42508 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-46595 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-111497 | Critical | github.com/andybalholm/brotli | v1.2.0 | ||
CVE-2026-39832 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-78663 | Critical | golang.org/x/net | v0.53.0 | ||
CVE-2026-39830 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39833 | Critical | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-78661 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-116591 | High | github.com/klauspost/compress | v1.18.4 | ||
CVE-2026-45022 | High | github.com/go-git/go-git/v5 | v5.18.0 | ||
GHSA-hrxh-6v49-42gf | High | google.golang.org/grpc | v1.79.3 | ||
CVE-2026-63209 | High | github.com/klauspost/compress | v1.18.4 | ||
CVE-2026-44973 | High | github.com/go-git/go-billy/v6 | v6.0.0-20260328065524-593ae452e14d | ||
CVE-2026-56864 | High | golang.org/x/mod | v0.34.0 | ||
CVE-2026-71556 | High | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-46597 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-48702 | High | github.com/sigstore/rekor | v1.5.0 | ||
CVE-2026-56854 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-97032 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-56851 | High | golang.org/x/text | v0.36.0 | ||
CVE-2026-116587 | High | github.com/go-jose/go-jose/v4 | v4.1.4 | ||
CVE-2026-71556 | High | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-44973 | High | github.com/go-git/go-billy/v5 | v5.8.0 | ||
CVE-2026-84445 | High | google.golang.org/grpc | v1.79.3 | ||
CVE-2026-78659 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-46600 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-39829 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-39821 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-78669 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-56855 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-56852 | High | golang.org/x/text | v0.36.0 | ||
CVE-2026-78662 | High | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-78660 | High | golang.org/x/net | v0.53.0 | ||
CVE-2026-56865 | High | golang.org/x/mod | v0.34.0 | ||
CVE-2026-84304 | High | google.golang.org/grpc | v1.79.3 | ||
CVE-2026-45022 | High | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-49834 | Medium | github.com/sigstore/sigstore-go | v1.1.4 | ||
CVE-2026-44740 | Medium | github.com/go-git/go-billy/v6 | v6.0.0-20260328065524-593ae452e14d | ||
CVE-2026-46598 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-114437 | Medium | github.com/go-chi/chi/v5 | v5.2.5 | ||
CVE-2026-44740 | Medium | github.com/go-git/go-billy/v5 | v5.8.0 | ||
CVE-2026-116585 | Medium | github.com/go-jose/go-jose/v4 | v4.1.4 | ||
GHSA-3fxj-6jh8-hvhx | Medium | github.com/go-chi/chi/v5 | v5.2.5 | ||
CVE-2026-71557 | Medium | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-6993 | Medium | github.com/go-kratos/kratos/v2 | v2.7.3 | ||
GHSA-gcjh-h69q-9w9g | Medium | github.com/google/cel-go | v0.27.0 | ||
CVE-2026-27136 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-45571 | Medium | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-85747 | Medium | github.com/docker/distribution | v2.8.3+incompatible | ||
GHSA-w5pp-99ch-qj29 | Medium | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-42506 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-42502 | Medium | golang.org/x/net | v0.53.0 | ||
GHSA-w5pp-99ch-qj29 | Medium | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-25680 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-39827 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-49835 | Medium | github.com/sigstore/timestamp-authority/v2 | v2.0.6 | ||
CVE-2026-41178 | Medium | go.opentelemetry.io/otel | v1.43.0 | ||
CVE-2026-45571 | Medium | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-111943 | Medium | stdlib | go1.27.2 | ||
CVE-2026-116586 | Medium | github.com/go-jose/go-jose/v4 | v4.1.4 | ||
CVE-2026-97045 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-71557 | Medium | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-39835 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-84303 | Medium | google.golang.org/grpc | v1.79.3 | ||
GHSA-pmwq-pjrm-6p5r | Medium | github.com/in-toto/in-toto-golang | v0.9.0 | ||
CVE-2026-39828 | Medium | golang.org/x/crypto | v0.50.0 | ||
CVE-2026-25681 | Medium | golang.org/x/net | v0.53.0 | ||
CVE-2026-54787 | Low | github.com/sigstore/sigstore-go | v1.1.4 | ||
CVE-2026-45570 | Low | github.com/go-git/go-git/v5 | v5.18.0 | ||
CVE-2026-45570 | Low | github.com/go-git/go-git/v6 | v6.0.0-alpha.2 | ||
CVE-2026-81870 | Low | go.opentelemetry.io/otel/sdk | v1.43.0 | ||
GO-2026-5775 | Unknown | github.com/go-chi/chi/v5 | v5.2.5 | ||
GO-2026-5777 | Unknown | github.com/go-chi/chi/v5 | v5.2.5 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.50.0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.