Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-p35j-2h7x-vmj3	CVE-2026-13506	Unknown	jenkins-2.568-openjdk-21	Under investigation
CGA-cg4g-958r-57qh	CVE-2026-8763	Unknown	jenkins-2.568-openjdk-21	Under investigation
CGA-vpvm-v9m8-m4m9	CVE-2026-13506	Unknown	logstash-9.5	Under investigation
CGA-65j3-wcrh-7ccc	CVE-2026-8763	Unknown	logstash-9.5	Under investigation
CGA-7qhf-crpx-v8v5	CVE-2026-13506	Unknown	logstash-9.5	Under investigation
CGA-jqmm-m85x-j85g	CVE-2026-8763	Unknown	logstash-9.5	Under investigation
CGA-v7pj-hcr2-x962	CVE-2026-63374	Unknown	authentik-2025.12	Under investigation
CGA-5j3h-q7j7-2wrr	CVE-2026-64847	Unknown	authentik-2025.12	Under investigation
CGA-8568-3m99-5w44	CVE-2026-13506	Unknown	eco-java-gradle-8.12.1	Pending upstream fix
CGA-2wvf-grh4-wcxg	CVE-2026-8763	Unknown	eco-java-gradle-8.12.1	Pending upstream fix
CGA-3hqx-66m3-xw4f	CVE-2026-13506	Unknown	druid	Fixed
CGA-q9m8-cjj9-3fw8	CVE-2026-8763	Unknown	druid	Fixed
CGA-w5pr-xvxg-7qjc	CVE-2026-13506	Unknown	eco-java-gradle-9.2.1	Pending upstream fix
CGA-rhv6-4x2c-729f	CVE-2026-8763	Unknown	eco-java-gradle-9.2.1	Pending upstream fix
CGA-grfm-gcj6-gj52	CVE-2026-13506	Unknown	eco-java-gradle-8.11.1	Pending upstream fix
CGA-683x-m7xj-92hw	CVE-2026-8763	Unknown	eco-java-gradle-8.11.1	Pending upstream fix

1,192,514 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company