Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-ww57-p39r-56pv	CVE-2026-63374	Unknown	open-webui	Under investigation
CGA-fq6j-r2xx-wv9v	CVE-2026-64847	Unknown	open-webui	Under investigation
CGA-mfxg-f4cc-747j	CVE-2026-13506	Unknown	keycloak-26.5	Under investigation
CGA-rxvm-hpf6-r7j6	CVE-2026-8763	Unknown	keycloak-26.5	Under investigation
CGA-3xhv-jj4q-hw5q	CVE-2026-13506	Unknown	keycloak-26.5	Under investigation
CGA-r584-28hr-gv38	CVE-2026-8763	Unknown	keycloak-26.5	Under investigation
CGA-49h4-r9h8-998x	CVE-2026-13506	Unknown	jenkins-2.541	Under investigation
CGA-mf3c-jm7q-wh39	CVE-2026-8763	Unknown	jenkins-2.541	Under investigation
CGA-4c5j-gpq6-5mhm	CVE-2026-13506	Unknown	ghidra	Under investigation
CGA-chfw-x236-c597	CVE-2026-8763	Unknown	ghidra	Under investigation
CGA-82jh-mx9g-j7c3	CVE-2026-13506	Unknown	ghidra	Under investigation
CGA-7mg4-82xm-34rv	CVE-2026-8763	Unknown	ghidra	Under investigation
CGA-c6fc-c6w4-692v	CVE-2026-13506	Unknown	eco-java-gradle-9.2.1	Pending upstream fix
CGA-hp5c-cx5h-p5fm	CVE-2026-8763	Unknown	eco-java-gradle-9.2.1	Pending upstream fix
CGA-9mm4-v925-j5px	CVE-2026-63374	Unknown	localstack	Under investigation
CGA-q93p-vgch-j77m	CVE-2026-64847	Unknown	localstack	Under investigation

1,192,514 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company