/

Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-wmcv-p9jv-j3wm	CVE-2026-25793	Unknown	step	Fixed
CGA-p9m8-r8qc-r4vx	CVE-2026-25793	Unknown	step-issuer	Fixed
CGA-f643-cw5g-xp45	CVE-2026-25793	Unknown	step	Fixed
CGA-8vm8-45g4-j3rm	CVE-2026-25793	Unknown	step-ca	Fixed
CGA-585c-j9hm-g938	CVE-2026-25793	Unknown	step-ca	Fixed
CGA-536h-jqhx-pmjc	CVE-2026-2391	High	langfuse-3-worker	Fixed
CGA-wrhg-5m59-gfp8	CVE-2026-2391	High	langfuse-3-worker	Fixed
CGA-cj48-hv7c-ghx7	CVE-2026-2391	High	langfuse-3	Fixed
CGA-qpcq-pwhq-cjwr	CVE-2026-2391	High	langfuse-3	Fixed
CGA-f57f-qp54-f625	CVE-2026-25793	Unknown	caddy	Fixed
CGA-6c25-vm78-hxx9	CVE-2026-25793	Unknown	caddy	Fixed
CGA-c8mv-q64j-49pp	CVE-2025-58190	Medium	k3s-static-1.32	Fixed
CGA-m97q-2596-w63v	CVE-2025-47911	Medium	k3s-static-1.32	Fixed
CGA-w37r-82mg-x9rv	CVE-2026-26014	Medium	k3s-static-1.32	Fixed
CGA-xw9w-g7gr-3hr5	CVE-2026-26014	Medium	k3s-static-1.32	Under investigation
CGA-c5vh-hcmc-6872	CVE-2025-58190	Medium	k3s-static-1.32	Under investigation

225,835 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company