CVE-2026-42306
Fixed in a distro release EPSS <1%CVSS 7.2
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.
Products: moby
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker | no fix |
| Go | github.com/moby/moby | no fix |
| Go | github.com/moby/moby/v2 | 2.0.0-beta.14 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | agentbeat | no fix |
| Chainguard | agentbeat-fips | no fix |
| Chainguard | amazon-cloudwatch-agent | 1.300074.0-r0 |
| Chainguard | amazon-cloudwatch-agent-fips | 1.300074.0-r0 |
| Chainguard | amazon-cloudwatch-agent-operator | 3.6.0-r0 |
| Chainguard | amazon-cloudwatch-agent-operator-fips | 3.6.0-r0 |
| Chainguard | amazon-ecs-agent | no fix |
| Chainguard | amazon-ecs-agent-fips | no fix |
| Chainguard | auditbeat-8.17 | no fix |
| Chainguard | auditbeat-8.19 | 8.19.17-r0 |
| Chainguard | auditbeat-9.0 | no fix |
| Chainguard | auditbeat-9.1 | no fix |
| Chainguard | auditbeat-9.2 | no fix |
| Chainguard | auditbeat-9.3 | 9.3.6-r0 |
| Chainguard | auditbeat-9.4 | 9.4.3-r0 |
| Chainguard | auditbeat-fips-8.17 | no fix |
| Chainguard | auditbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | auditbeat-fips-9.0 | no fix |
| Chainguard | auditbeat-fips-9.1 | no fix |
| Chainguard | auditbeat-fips-9.2 | no fix |
| Chainguard | auditbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | auditbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | aws-otel-collector | 0.48.0-r0 |
| Chainguard | aws-otel-collector-fips | 0.48.0-r0 |
| Chainguard | buildah | 1.44.0-r0 |
| Chainguard | buildah-fips | 1.44.0-r0 |
| Chainguard | cg | 0 |
| Chainguard | chainctl | no fix |
| Chainguard | chainctl-fips | no fix |
| Chainguard | chainloop-control-plane | 1.100.8-r0 |
| Chainguard | chainloop-control-plane-fips | 1.100.8-r0 |
| Chainguard | chaos-mesh | no fix |
| Chainguard | chaos-mesh-daemon | no fix |
| Chainguard | chaos-mesh-dashboard | no fix |
| Chainguard | chaos-mesh-fips | no fix |
| Chainguard | chaos-mesh-fips-daemon | no fix |
| Chainguard | chaos-mesh-fips-dashboard | no fix |
| Chainguard | cloudbeat-8.17 | 0 |
| Chainguard | cloudbeat-8.19 | 8.19.23-r0 |
| Chainguard | cloudbeat-9.0 | 0 |
| Chainguard | cloudbeat-9.1 | no fix |
| Chainguard | cloudbeat-9.2 | no fix |
| Chainguard | cloudbeat-9.3 | 9.3.8-r0 |
| Chainguard | cloudbeat-9.4 | 9.4.4-r0 |
| Chainguard | cloudbeat-fips-8.17 | 0 |
| Chainguard | cloudbeat-fips-8.19 | 8.19.23-r0 |
| Chainguard | cloudbeat-fips-9.0 | 0 |
| Chainguard | cloudbeat-fips-9.1 | no fix |
| Chainguard | cloudbeat-fips-9.2 | no fix |
| Chainguard | cloudbeat-fips-9.3 | 9.3.8-r0 |
| Chainguard | cloudbeat-fips-9.4 | 9.4.4-r0 |
| Chainguard | cluster-api-1.10-capd-manager | no fix |
| Chainguard | cluster-api-1.8-capd-manager | no fix |
| Chainguard | cluster-api-1.9-capd-manager | no fix |
| Chainguard | cluster-api-fips-1.10-capd-manager | no fix |
| Chainguard | cluster-api-fips-1.8-capd-manager | 0 |
| Chainguard | cluster-api-fips-1.9-capd-manager | no fix |
| Chainguard | commercial-chainloop-backend | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.5 | no fix |
| Chainguard | commercial-grafana-12.3 | 12.3.8-r0 |
| Chainguard | commercial-grafana-12.4 | 12.4.5-r0 |
| Chainguard | cri-tools | 1.37.0-r0 |
| Chainguard | crictl | 1.37.0-r0 |
| Chainguard | crossplane-1.20-crank | 0 |
| Chainguard | crossplane-2.0-crank | 0 |
| Chainguard | crossplane-2.1-crank | 0 |
| Chainguard | crossplane-2.2-crank | 0 |
| Chainguard | crossplane-2.3-crank | 0 |
| Chainguard | crossplane-2.4-crank | 0 |
| Chainguard | crossplane-cli-2.3 | 0 |
| Chainguard | crossplane-cli-2.4 | 0 |
| Chainguard | crossplane-cli-fips-2.3 | 0 |
| Chainguard | crossplane-cli-fips-2.4 | 0 |
| Chainguard | crossplane-fips-1.20-crank | 0 |
| Chainguard | crossplane-fips-2.0-crank | 0 |
| Chainguard | crossplane-fips-2.1-crank | 0 |
| Chainguard | crossplane-fips-2.2-crank | 0 |
| Chainguard | crossplane-fips-2.3-crank | 0 |
| Chainguard | crossplane-fips-2.4-crank | 0 |
| Chainguard | crossplane-function-kcl | 0 |
| Chainguard | crossplane-function-kcl-fips | 0 |
| Chainguard | ctop | 0 |
| Chainguard | ctop-fips | 0 |
| Chainguard | dagger | 0 |
| Chainguard | datadog-agent-7.71 | 0 |
| Chainguard | datadog-agent-7.71-full | 0 |
| Chainguard | datadog-agent-7.72 | 0 |
| Chainguard | datadog-agent-7.72-full | 0 |
| Chainguard | datadog-agent-7.73 | no fix |
| Chainguard | datadog-agent-7.73-full | no fix |
| Chainguard | datadog-agent-7.74 | no fix |
| Chainguard | datadog-agent-7.74-full | no fix |
| Chainguard | datadog-agent-7.75 | no fix |
| Chainguard | datadog-agent-7.75-full | no fix |
| Chainguard | datadog-agent-7.76 | no fix |
| Chainguard | datadog-agent-7.76-full | no fix |
| Chainguard | datadog-agent-7.77 | no fix |
| Chainguard | datadog-agent-7.77-full | 7.77.3-r10 |
| Chainguard | datadog-agent-7.78 | no fix |
| Chainguard | datadog-agent-7.78-full | no fix |
| Chainguard | datadog-agent-fips-7.71 | 0 |
| Chainguard | datadog-agent-fips-7.71-full | 0 |
| Chainguard | datadog-agent-fips-7.72 | 0 |
| Chainguard | datadog-agent-fips-7.72-full | 0 |
| Chainguard | datadog-agent-fips-7.73 | no fix |
| Chainguard | datadog-agent-fips-7.73-full | no fix |
| Chainguard | datadog-agent-fips-7.74 | no fix |
| Chainguard | datadog-agent-fips-7.74-full | no fix |
| Chainguard | datadog-agent-fips-7.75 | no fix |
| Chainguard | datadog-agent-fips-7.75-full | no fix |
| Chainguard | datadog-agent-fips-7.76 | no fix |
| Chainguard | datadog-agent-fips-7.76-full | no fix |
| Chainguard | datadog-agent-fips-7.77 | no fix |
| Chainguard | datadog-agent-fips-7.77-full | no fix |
| Chainguard | datadog-agent-fips-7.78 | no fix |
| Chainguard | datadog-agent-fips-7.78-full | no fix |
| Chainguard | datadog-cluster-agent-7.71 | 0 |
| Chainguard | datadog-cluster-agent-7.72 | 0 |
| Chainguard | datadog-cluster-agent-7.73 | 0 |
| Chainguard | datadog-cluster-agent-7.74 | 0 |
| Chainguard | datadog-cluster-agent-7.75 | no fix |
| Chainguard | datadog-cluster-agent-7.76 | no fix |
| Chainguard | datadog-cluster-agent-7.77 | no fix |
| Chainguard | datadog-cluster-agent-7.78 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.71 | 0 |
| Chainguard | datadog-cluster-agent-fips-7.72 | 0 |
| Chainguard | datadog-cluster-agent-fips-7.73 | 0 |
| Chainguard | datadog-cluster-agent-fips-7.74 | 0 |
| Chainguard | datadog-cluster-agent-fips-7.75 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.76 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.77 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.78 | no fix |
| Chainguard | dive | no fix |
| Chainguard | docker-28 | no fix |
| Chainguard | docker-cli-buildx | 0 |
| Chainguard | docker-cli-buildx-fips | no fix |
| Chainguard | docker-compose | 0 |
| Chainguard | docker-compose-fips | 5.5.1-r0 |
| Chainguard | docker-credential-gcr | 2.2.0-r0 |
| Chainguard | docker-credential-gcr-fips | 2.2.0-r0 |
| Chainguard | dockerd-28 | no fix |
| Chainguard | dockerd-29 | 0 |
| Chainguard | dockerd-fips-28 | no fix |
| Chainguard | dockerd-fips-29 | 29.5.2-r0 |
| Chainguard | dogstatsd-7.71 | no fix |
| Chainguard | dogstatsd-7.72 | no fix |
| Chainguard | dogstatsd-7.73 | no fix |
| Chainguard | dogstatsd-7.74 | no fix |
| Chainguard | dogstatsd-7.75 | no fix |
| Chainguard | dogstatsd-7.76 | no fix |
| Chainguard | dogstatsd-7.77 | no fix |
| Chainguard | dogstatsd-7.78 | no fix |
| Chainguard | drone | 0 |
| Chainguard | drone-fips | 0 |
| Chainguard | elastic-agent-8.19 | 8.19.16-r0 |
| Chainguard | elastic-agent-8.19 | 8.19.17-r0 |
| Chainguard | elastic-agent-9.1 | no fix |
| Chainguard | elastic-agent-9.2 | no fix |
| Chainguard | elastic-agent-9.3 | 9.3.6-r0 |
| Chainguard | elastic-agent-9.3 | 9.3.5-r0 |
| Chainguard | elastic-agent-9.4 | 9.4.3-r0 |
| Chainguard | elastic-agent-9.4 | 9.4.2-r0 |
| Chainguard | elastic-agent-fips-8.19 | 8.19.17-r0 |
| Chainguard | elastic-agent-fips-8.19 | 8.19.16-r0 |
| Chainguard | elastic-agent-fips-9.1 | no fix |
| Chainguard | elastic-agent-fips-9.2 | no fix |
| Chainguard | elastic-agent-fips-9.3 | 9.3.5-r0 |
| Chainguard | elastic-agent-fips-9.3 | 9.3.6-r0 |
| Chainguard | elastic-agent-fips-9.4 | 9.4.3-r0 |
| Chainguard | elastic-agent-fips-9.4 | 9.4.2-r0 |
| Chainguard | elastic-otel-collector-9.3 | 9.3.6-r0 |
| Chainguard | elastic-otel-collector-9.4 | 9.4.3-r0 |
| Chainguard | elastic-otel-collector-fips-9.3 | 9.3.6-r0 |
| Chainguard | elastic-otel-collector-fips-9.4 | 9.4.3-r0 |
| Chainguard | envoy-gateway-1.5 | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5 | no fix |
| Chainguard | envoy-gateway-1.5-compat | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5-egctl | no fix |
| Chainguard | envoy-gateway-1.5-egctl | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5-ratelimit-a90e0e5d | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.6 | no fix |
| Chainguard | envoy-gateway-1.6 | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6-compat | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6-egctl | no fix |
| Chainguard | envoy-gateway-1.6-egctl | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6-ratelimit-3fb70258 | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.7 | 0 |
| Chainguard | envoy-gateway-1.7-egctl | 1.7.5-r0 |
| Chainguard | envoy-gateway-egctl | 1.8.2-r0 |
| Chainguard | envoy-gateway-fips-1.5 | no fix |
| Chainguard | envoy-gateway-fips-1.5 | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-compat | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-egctl | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-egctl | no fix |
| Chainguard | envoy-gateway-fips-1.5-ratelimit-a90e0e5d | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.6 | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6 | 0 |
| Chainguard | envoy-gateway-fips-1.6-compat | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6-egctl | 0 |
| Chainguard | envoy-gateway-fips-1.6-egctl | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6-ratelimit-3fb70258 | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.7 | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7 | no fix |
| Chainguard | envoy-gateway-fips-1.7-compat | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7-egctl | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7-ratelimit-3fb70258 | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-egctl | 1.8.2-r0 |
| Chainguard | falco-no-driver | no fix |
| Chainguard | falcoctl | no fix |
| Chainguard | falcoctl-fips | no fix |
| Chainguard | falcoctl-fips-0.4 | 0 |
| Chainguard | filebeat-8.17 | no fix |
| Chainguard | filebeat-8.19 | 8.19.17-r0 |
| Chainguard | filebeat-9.0 | no fix |
| Chainguard | filebeat-9.1 | no fix |
| Chainguard | filebeat-9.2 | no fix |
| Chainguard | filebeat-9.3 | 9.3.6-r0 |
| Chainguard | filebeat-9.4 | 9.4.3-r0 |
| Chainguard | filebeat-fips-8.17 | no fix |
| Chainguard | filebeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | filebeat-fips-9.0 | no fix |
| Chainguard | filebeat-fips-9.1 | no fix |
| Chainguard | filebeat-fips-9.2 | no fix |
| Chainguard | filebeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | filebeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | gatekeeper-3.19-gator | no fix |
| Chainguard | gatekeeper-3.20-gator | no fix |
| Chainguard | gatekeeper-3.21-gator | no fix |
| Chainguard | gitlab-docker-machine-18.10 | no fix |
| Chainguard | gitlab-docker-machine-18.11 | no fix |
| Chainguard | gitlab-docker-machine-18.6 | no fix |
| Chainguard | gitlab-docker-machine-18.7 | no fix |
| Chainguard | gitlab-docker-machine-18.8 | no fix |
| Chainguard | gitlab-docker-machine-18.9 | no fix |
| Chainguard | gitlab-docker-machine-19.0 | no fix |
| Chainguard | gitlab-docker-machine-19.1 | no fix |
| Chainguard | gitlab-docker-machine-19.2 | 0 |
| Chainguard | gitlab-docker-machine-19.3 | 0 |
| Chainguard | gitlab-docker-machine-19.4 | 0 |
| Chainguard | gitlab-docker-machine-19.5 | 0 |
| Chainguard | gitlab-docker-machine-fips-18.10 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.11 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.9 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.0 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.1 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.2 | 0 |
| Chainguard | gitlab-docker-machine-fips-19.3 | 0 |
| Chainguard | gitlab-docker-machine-fips-19.4 | 0 |
| Chainguard | gitlab-docker-machine-fips-19.5 | 0 |
| Chainguard | gitlab-rails-ce-18.1 | 0 |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | no fix |
| Chainguard | gitlab-rails-ce-18.3 | no fix |
| Chainguard | gitlab-rails-ce-18.4 | no fix |
| Chainguard | gitlab-rails-ce-18.5 | no fix |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | no fix |
| Chainguard | gitlab-rails-ce-19.1 | no fix |
| Chainguard | gitlab-rails-ce-19.2 | 0 |
| Chainguard | gitlab-rails-ce-19.3 | 0 |
| Chainguard | gitlab-rails-ce-19.4 | 0 |
| Chainguard | gitlab-rails-ce-19.5 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.10 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.11 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.3 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.4 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.0 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.2 | 0 |
| Chainguard | gitlab-rails-ce-fips-19.3 | 0 |
| Chainguard | gitlab-rails-ce-fips-19.4 | 0 |
| Chainguard | gitlab-rails-ce-fips-19.5 | 0 |
| Chainguard | gitlab-runner-18.10 | no fix |
| Chainguard | gitlab-runner-18.11 | no fix |
| Chainguard | gitlab-runner-18.6 | no fix |
| Chainguard | gitlab-runner-18.7 | no fix |
| Chainguard | gitlab-runner-18.8 | no fix |
| Chainguard | gitlab-runner-18.9 | no fix |
| Chainguard | gitlab-runner-19.0 | no fix |
| Chainguard | gitlab-runner-19.1 | no fix |
| Chainguard | gitlab-runner-fips-18.10 | no fix |
| Chainguard | gitlab-runner-fips-18.11 | no fix |
| Chainguard | gitlab-runner-fips-18.9 | no fix |
| Chainguard | gitlab-runner-fips-19.0 | no fix |
| Chainguard | gitlab-runner-fips-19.1 | no fix |
| Chainguard | gitlab-runner-helper-18.10 | no fix |
| Chainguard | gitlab-runner-helper-18.11 | no fix |
| Chainguard | gitlab-runner-helper-18.6 | no fix |
| Chainguard | gitlab-runner-helper-18.7 | no fix |
| Chainguard | gitlab-runner-helper-18.8 | no fix |
| Chainguard | gitlab-runner-helper-18.9 | no fix |
| Chainguard | gitlab-runner-helper-19.0 | no fix |
| Chainguard | gitlab-runner-helper-19.1 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.10 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.11 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.9 | no fix |
| Chainguard | gitlab-runner-helper-fips-19.0 | no fix |
| Chainguard | gitlab-runner-helper-fips-19.1 | no fix |
| Chainguard | gitness | no fix |
| Chainguard | go-sqlcmd | no fix |
| Chainguard | google-cloud-otel-ops-collector | 0.151.0-r0 |
| Chainguard | google-osconfig-agent | 0 |
| Chainguard | grafana-12.3 | 12.3.7-r0 |
| Chainguard | grafana-12.4 | 12.4.4-r0 |
| Chainguard | grafana-13.0 | 13.0.2-r0 |
| Chainguard | grafana-alloy | 1.20.0-r0 |
| Chainguard | grafana-alloy-fips | 1.20.0-r0 |
| Chainguard | grafana-fips-12.3 | 12.3.7-r0 |
| Chainguard | grafana-fips-12.4 | 12.4.4-r0 |
| Chainguard | grafana-fips-13.0 | 13.0.2-r0 |
| Chainguard | grype | no fix |
| Chainguard | grype-fips | no fix |
| Chainguard | harvester | 1.8.1-r11 |
| Chainguard | harvester-fips | 1.8.1-r11 |
| Chainguard | harvester-fips-webhook | 1.8.1-r11 |
| Chainguard | harvester-webhook | 1.8.1-r11 |
| Chainguard | heartbeat-8.17 | no fix |
| Chainguard | heartbeat-8.19 | 8.19.17-r0 |
| Chainguard | heartbeat-9.0 | no fix |
| Chainguard | heartbeat-9.1 | no fix |
| Chainguard | heartbeat-9.2 | no fix |
| Chainguard | heartbeat-9.3 | 9.3.6-r0 |
| Chainguard | heartbeat-9.4 | 9.4.3-r0 |
| Chainguard | heartbeat-fips-8.17 | no fix |
| Chainguard | heartbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | heartbeat-fips-9.0 | no fix |
| Chainguard | heartbeat-fips-9.1 | no fix |
| Chainguard | heartbeat-fips-9.2 | no fix |
| Chainguard | heartbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | heartbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | hydra | no fix |
| Chainguard | hydra-fips | no fix |
| Chainguard | k3d | 0 |
| Chainguard | k3d-tools | 0 |
| Chainguard | k3s | no fix |
| Chainguard | k3s-1.31 | no fix |
| Chainguard | k3s-1.32 | no fix |
| Chainguard | k3s-1.33 | no fix |
| Chainguard | k3s-1.34 | 0 |
| Chainguard | k3s-1.35 | 0 |
| Chainguard | k3s-1.36 | 0 |
| Chainguard | k3s-1.37 | 0 |
| Chainguard | k3s-fips-1.33 | 0 |
| Chainguard | k3s-fips-1.34 | 0 |
| Chainguard | k3s-fips-1.35 | 0 |
| Chainguard | k3s-fips-1.36 | 0 |
| Chainguard | k3s-fips-1.37 | 0 |
| Chainguard | k3s-static | no fix |
| Chainguard | k3s-static-1.31 | no fix |
| Chainguard | k3s-static-1.32 | no fix |
| Chainguard | k3s-static-1.33 | no fix |
| Chainguard | k3s-static-1.34 | 0 |
| Chainguard | k3s-static-1.35 | 0 |
| Chainguard | k3s-static-1.36 | 0 |
| Chainguard | k3s-static-1.37 | 0 |
| Chainguard | k8s-image-swapper | no fix |
| Chainguard | k8s-image-swapper-fips | no fix |
| Chainguard | k8sgpt | no fix |
| Chainguard | k8sgpt | 0.4.36-r1 |
| Chainguard | k8sgpt | 0 |
| Chainguard | kaniko | no fix |
| Chainguard | kaniko-fips | no fix |
| Chainguard | kaniko-warmer | no fix |
| Chainguard | kaniko-warmer-fips | no fix |
| Chainguard | ko | 0.19.0-r0 |
| Chainguard | ko-fips | 0.19.0-r0 |
| Chainguard | kots | 1.131.1-r1 |
| Chainguard | kots | 1.131.0-r0 |
| Chainguard | kpt | 1.0.0-r0 |
| Chainguard | kubedock | 0.22.0-r0 |
| Chainguard | kubedock-fips | 0.22.0-r0 |
| Chainguard | kubescape | 0 |
| Chainguard | kubescape-operator | no fix |
| Chainguard | kubescape-operator-fips | no fix |
| Chainguard | kubescape-server | no fix |
| Chainguard | kubescape-server-downloader | no fix |
| Chainguard | kubescape-server-fips | no fix |
| Chainguard | kubescape-server-fips-downloader | no fix |
| Chainguard | kubevela-vela-cli | no fix |
| Chainguard | kubevela-vela-cli-fips | no fix |
| Chainguard | kubevela-vela-core | no fix |
| Chainguard | kubevela-vela-core-fips | no fix |
| Chainguard | kubevirt-cdi-importer-1.6 | 0 |
| Chainguard | kubevirt-cdi-importer-fips-1.6 | 0 |
| Chainguard | kubevirt-cdi-uploadserver-1.5 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-1.6 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-fips-1.5 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-fips-1.6 | no fix |
| Chainguard | lazydocker | no fix |
| Chainguard | livekit-cli | 2.18.1-r0 |
| Chainguard | loki-2.9-promtail | no fix |
| Chainguard | loki-3.4-promtail | no fix |
| Chainguard | loki-3.5-promtail | no fix |
| Chainguard | loki-3.6-promtail | no fix |
| Chainguard | loki-fips-2.9-promtail | no fix |
| Chainguard | loki-fips-3.4-promtail | no fix |
| Chainguard | loki-fips-3.5-promtail | no fix |
| Chainguard | loki-fips-3.6-promtail | no fix |
| Chainguard | longhorn-engine-1.10 | no fix |
| Chainguard | longhorn-engine-1.8 | no fix |
| Chainguard | longhorn-engine-1.9 | no fix |
| Chainguard | manifest-tool | 0 |
| Chainguard | melange | no fix |
| Chainguard | metricbeat-8.17 | no fix |
| Chainguard | metricbeat-8.19 | 8.19.17-r0 |
| Chainguard | metricbeat-9.0 | no fix |
| Chainguard | metricbeat-9.1 | no fix |
| Chainguard | metricbeat-9.2 | no fix |
| Chainguard | metricbeat-9.3 | 9.3.6-r0 |
| Chainguard | metricbeat-9.4 | 9.4.3-r0 |
| Chainguard | metricbeat-fips-8.17 | no fix |
| Chainguard | metricbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | metricbeat-fips-9.0 | no fix |
| Chainguard | metricbeat-fips-9.1 | no fix |
| Chainguard | metricbeat-fips-9.2 | no fix |
| Chainguard | metricbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | metricbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | moby-ryuk | no fix |
| Chainguard | moby-ryuk-fips | no fix |
| Chainguard | nerdctl | 2.3.1-r0 |
| Chainguard | nerdctl-fips | 2.3.1-r0 |
| Chainguard | nrdot-collector-k8s | 1.12.0-r8 |
| Chainguard | nrdot-collector-k8s-fips | 1.12.0-r4 |
| Chainguard | nuclei | 3.9.0-r0 |
| Chainguard | opentelemetry-operator-fips-otel-allocator | 0.154.0-r0 |
| Chainguard | opentelemetry-operator-otel-allocator | 0.154.0-r0 |
| Chainguard | ops-agent | no fix |
| Chainguard | ops-agent-wrapper | no fix |
| Chainguard | ory-keto | 0 |
| Chainguard | ory-keto-fips | 0 |
| Chainguard | ory-kratos | no fix |
| Chainguard | ory-kratos-fips | no fix |
| Chainguard | osv-scanner | 0 |
| Chainguard | podman | 6.0.0-r0 |
| Chainguard | podman-5.8 | no fix |
| Chainguard | podman-fips | 6.0.0-r0 |
| Chainguard | podman-fips-5.8 | 0 |
| Chainguard | portieris | 0.14.1-r0 |
| Chainguard | portieris-fips | 0.14.1-r0 |
| Chainguard | prometheus-2.51 | 0 |
| Chainguard | prometheus-3.10 | 0 |
| Chainguard | prometheus-3.11 | 0 |
| Chainguard | prometheus-3.5 | 0 |
| Chainguard | prometheus-3.7 | no fix |
| Chainguard | prometheus-3.8 | 0 |
| Chainguard | prometheus-3.9 | no fix |
| Chainguard | prometheus-fips-3.10 | 0 |
| Chainguard | prometheus-fips-3.11 | 0 |
| Chainguard | prometheus-fips-3.5 | 0 |
| Chainguard | prometheus-fips-3.7 | no fix |
| Chainguard | prometheus-fips-3.8 | 0 |
| Chainguard | prometheus-fips-3.9 | 0 |
| Chainguard | prometheus-podman-exporter | 2.0.0-r0 |
| Chainguard | prometheus-podman-exporter-fips | 2.0.0-r0 |
| Chainguard | promxy | no fix |
| Chainguard | promxy-fips | no fix |
| Chainguard | py3-docker | 0 |
| Chainguard | py3.10-docker | 0 |
| Chainguard | py3.11-docker | 0 |
| Chainguard | py3.12-docker | 0 |
| Chainguard | py3.13-docker | 0 |
| Chainguard | rancher-2.10 | no fix |
| Chainguard | rancher-2.11 | no fix |
| Chainguard | rancher-2.12 | 2.12.11-r0 |
| Chainguard | rancher-2.13 | 2.13.7-r0 |
| Chainguard | rancher-2.14 | 2.14.3-r0 |
| Chainguard | rancher-agent-2.10 | no fix |
| Chainguard | rancher-agent-2.11 | no fix |
| Chainguard | rancher-agent-2.12 | 2.12.11-r0 |
| Chainguard | rancher-agent-2.13 | 2.13.7-r0 |
| Chainguard | rancher-agent-2.13 | 2.13.9-r4 |
| Chainguard | rancher-agent-2.13 | 0 |
| Chainguard | rancher-agent-2.14 | 2.14.3-r0 |
| Chainguard | rancher-agent-2.9 | no fix |
| Chainguard | rancher-machine | 0.15.0.144-r0 |
| Chainguard | rke2-runtime-1.31 | no fix |
| Chainguard | rke2-runtime-1.32 | no fix |
| Chainguard | rke2-runtime-1.33 | no fix |
| Chainguard | rke2-runtime-1.34 | no fix |
| Chainguard | rke2-runtime-1.35 | no fix |
| Chainguard | rke2-runtime-1.36 | no fix |
| Chainguard | rke2-runtime-1.37 | 0 |
| Chainguard | rke2-runtime-fips-1.31 | no fix |
| Chainguard | rke2-runtime-fips-1.32 | no fix |
| Chainguard | rke2-runtime-fips-1.33 | no fix |
| Chainguard | rke2-runtime-fips-1.34 | 0 |
| Chainguard | rke2-runtime-fips-1.35 | 0 |
| Chainguard | rke2-runtime-fips-1.36 | 0 |
| Chainguard | rke2-runtime-fips-1.37 | 0 |
| Chainguard | rpk-25.1.12 | no fix |
| Chainguard | rpk-25.2.14 | no fix |
| Chainguard | rpk-25.3.10 | no fix |
| Chainguard | rpk-25.3.15 | no fix |
| Chainguard | rpk-25.3.16 | 0 |
| Chainguard | rpk-25.3.17 | 0 |
| Chainguard | rpk-26.1.10 | no fix |
| Chainguard | rpk-26.1.11 | no fix |
| Chainguard | rpk-26.1.12 | no fix |
| Chainguard | rpk-26.1.13 | no fix |
| Chainguard | rpk-26.1.14 | 0 |
| Chainguard | rpk-26.1.15 | 0 |
| Chainguard | rpk-26.1.16 | 0 |
| Chainguard | rpk-26.1.17 | 0 |
| Chainguard | rpk-26.1.8 | no fix |
| Chainguard | rpk-26.1.9 | no fix |
| Chainguard | rpk-26.2.1 | 0 |
| Chainguard | scorecard | 0 |
| Chainguard | skaffold | no fix |
| Chainguard | skaffold-fips | 0 |
| Chainguard | skopeo | 1.23.0-r0 |
| Chainguard | skopeo-fips | 1.23.0-r0 |
| Chainguard | spire-agent | 1.15.2-r0 |
| Chainguard | spire-agent-fips | 1.15.2-r0 |
| Chainguard | starboard-exporter | 0 |
| Chainguard | starboard-exporter-fips | 0 |
| Chainguard | telegraf-1.35 | no fix |
| Chainguard | telegraf-1.36 | no fix |
| Chainguard | telegraf-1.37 | no fix |
| Chainguard | telegraf-1.38 | no fix |
| Chainguard | teleport-18.6 | 0 |
| Chainguard | teleport-operator-fips-16 | 0 |
| Chainguard | tkn | no fix |
| Chainguard | tkn-fips | no fix |
| Chainguard | trivy | 0.70.0-r0 |
| Chainguard | trivy-fips | 0.70.0-r0 |
| Chainguard | trivy-operator | 0.30.1-r26 |
| Chainguard | trivy-operator-fips | 0.30.1-r23 |
| Chainguard | trufflehog | no fix |
| Chainguard | trufflehog-fips | no fix |
| Chainguard | tw | 0 |
| Chainguard | twt | 0 |
| Chainguard | undock | 0.14.0-r0 |
| Chainguard | upwind-agent | 0.130.0-r0 |
| Chainguard | vault-1.16 | 1.16.3-r44 |
| Chainguard | vault-1.17 | no fix |
| Chainguard | vault-1.18 | no fix |
| Chainguard | vault-1.19 | no fix |
| Chainguard | vault-1.20 | no fix |
| Chainguard | vault-1.21 | no fix |
| Chainguard | vault-fips-1.21 | no fix |
| Chainguard | vcluster | no fix |
| Chainguard | vcluster-cli | no fix |
| Chainguard | vcluster-cli-fips | no fix |
| Chainguard | vcluster-fips | no fix |
| Chainguard | vcluster-syncer | no fix |
| Chainguard | vcluster-syncer-fips | no fix |
| Chainguard | xeol | no fix |
| Chainguard | xeol-fips | no fix |
| Chainguard | zot | 2.1.17-r0 |
| Debian 12 | docker.io | no fix |
| Debian 13 | docker.io | 26.1.5+dfsg1-9+deb13u1 |
| Debian 14 | docker.io | 28.5.2+dfsg4-3 |
| Red Hat edge manager 1.1 | flightctl | 0:1.1.4-1.el10em |
| Red Hat edge manager 1.1 | flightctl | 0:1.1.4-1.el9em |
| Red Hat edge manager 1.1 | flightctl-agent | 0:1.1.4-1.el9em |
| Red Hat edge manager 1.1 | flightctl-agent | 0:1.1.4-1.el10em |
| Red Hat edge manager 1.1 | flightctl-cli | 0:1.1.4-1.el9em |
| Red Hat edge manager 1.1 | flightctl-cli | 0:1.1.4-1.el10em |
| SUSE Linux Enterprise Server 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 |
| Ubuntu 25.10 | docker.io | no fix |
| Ubuntu 25.10 | docker.io-app | no fix |
| Ubuntu 26.04 LTS | docker.io | no fix |
| Ubuntu 26.04 LTS | docker.io-app | no fix |
| Ubuntu 26.10 | docker.io | no fix |
| Ubuntu 26.10 | docker.io-app | no fix |
| Ubuntu Pro 16.04 LTS | docker.io | no fix |
| Ubuntu Pro 18.04 LTS | docker.io | no fix |
| Ubuntu Pro 20.04 LTS | docker.io | no fix |
| Ubuntu Pro 20.04 LTS | docker.io-app | no fix |
| Ubuntu Pro 22.04 LTS | docker.io | no fix |
| Ubuntu Pro 22.04 LTS | docker.io-app | no fix |
| Ubuntu Pro 24.04 LTS | docker.io | no fix |
| Ubuntu Pro 24.04 LTS | docker.io-app | no fix |
| Wolfi | amazon-cloudwatch-agent | 1.300074.0-r0 |
| Wolfi | amazon-cloudwatch-agent-operator | 3.6.0-r0 |
| Wolfi | aws-otel-collector | 0.48.0-r0 |
| Wolfi | buildah | 1.44.0-r0 |
| Wolfi | cri-tools | 1.37.0-r0 |
| Wolfi | crictl | 1.37.0-r0 |
| Wolfi | crossplane-2.1-crank | 0 |
| Wolfi | crossplane-2.2-crank | 0 |
| Wolfi | ctop | 0 |
| Wolfi | dagger | 0 |
| Wolfi | datadog-agent-7.72 | 0 |
| Wolfi | datadog-agent-7.72-full | 0 |
| Wolfi | datadog-agent-7.73 | no fix |
| Wolfi | datadog-agent-7.73-full | no fix |
| Wolfi | datadog-agent-7.74 | no fix |
| Wolfi | datadog-agent-7.75 | no fix |
| Wolfi | datadog-agent-7.76 | no fix |
| Wolfi | datadog-agent-7.77 | no fix |
| Wolfi | datadog-agent-7.77-full | 7.77.3-r10 |
| Wolfi | datadog-agent-7.78 | no fix |
| Wolfi | datadog-agent-7.78-full | no fix |
| Wolfi | datadog-cluster-agent-7.72 | 0 |
| Wolfi | datadog-cluster-agent-7.73 | 0 |
| Wolfi | datadog-cluster-agent-7.75 | no fix |
| Wolfi | datadog-cluster-agent-7.76 | no fix |
| Wolfi | datadog-cluster-agent-7.77 | no fix |
| Wolfi | datadog-cluster-agent-7.78 | no fix |
| Wolfi | dive | no fix |
| Wolfi | docker-28 | no fix |
| Wolfi | docker-cli-buildx | 0 |
| Wolfi | docker-compose | 0 |
| Wolfi | docker-credential-gcr | 2.2.0-r0 |
| Wolfi | dockerd-28 | no fix |
| Wolfi | dockerd-29 | 0 |
| Wolfi | dogstatsd-7.72 | no fix |
| Wolfi | dogstatsd-7.73 | no fix |
| Wolfi | dogstatsd-7.75 | no fix |
| Wolfi | dogstatsd-7.76 | no fix |
| Wolfi | dogstatsd-7.77 | no fix |
| Wolfi | dogstatsd-7.78 | no fix |
| Wolfi | envoy-gateway-egctl | 1.8.2-r0 |
| Wolfi | falco-no-driver | no fix |
| Wolfi | falcoctl | no fix |
| Wolfi | gatekeeper-3.21-gator | no fix |
| Wolfi | gitlab-docker-machine-18.10 | no fix |
| Wolfi | gitlab-docker-machine-18.11 | no fix |
| Wolfi | gitlab-docker-machine-18.6 | no fix |
| Wolfi | gitlab-docker-machine-18.7 | no fix |
| Wolfi | gitlab-docker-machine-18.8 | no fix |
| Wolfi | gitlab-docker-machine-18.9 | no fix |
| Wolfi | gitlab-docker-machine-19.0 | no fix |
| Wolfi | gitlab-docker-machine-19.1 | no fix |
| Wolfi | gitlab-docker-machine-19.2 | 0 |
| Wolfi | gitlab-docker-machine-19.3 | 0 |
| Wolfi | gitlab-runner-18.10 | no fix |
| Wolfi | gitlab-runner-18.11 | no fix |
| Wolfi | gitlab-runner-18.6 | no fix |
| Wolfi | gitlab-runner-18.7 | no fix |
| Wolfi | gitlab-runner-18.8 | no fix |
| Wolfi | gitlab-runner-18.9 | no fix |
| Wolfi | gitlab-runner-19.0 | no fix |
| Wolfi | gitlab-runner-19.1 | no fix |
| Wolfi | gitlab-runner-helper-18.10 | no fix |
| Wolfi | gitlab-runner-helper-18.11 | no fix |
| Wolfi | gitlab-runner-helper-18.6 | no fix |
| Wolfi | gitlab-runner-helper-18.7 | no fix |
| Wolfi | gitlab-runner-helper-18.8 | no fix |
| Wolfi | gitlab-runner-helper-18.9 | no fix |
| Wolfi | gitlab-runner-helper-19.0 | no fix |
| Wolfi | gitlab-runner-helper-19.1 | no fix |
| Wolfi | gitness | no fix |
| Wolfi | grafana-12.3 | 12.3.7-r0 |
| Wolfi | grafana-12.4 | 12.4.4-r0 |
| Wolfi | grafana-13.0 | 13.0.2-r0 |
| Wolfi | grafana-alloy | 1.20.0-r0 |
| Wolfi | grype | no fix |
| Wolfi | hydra | no fix |
| Wolfi | k3d | 0 |
| Wolfi | k3d-tools | 0 |
| Wolfi | k3s | no fix |
| Wolfi | k3s-1.32 | no fix |
| Wolfi | k3s-1.33 | no fix |
| Wolfi | k3s-1.34 | 0 |
| Wolfi | k3s-1.35 | 0 |
| Wolfi | k3s-1.36 | 0 |
| Wolfi | k3s-1.37 | 0 |
| Wolfi | k3s-static | no fix |
| Wolfi | k3s-static-1.32 | no fix |
| Wolfi | k3s-static-1.33 | no fix |
| Wolfi | k3s-static-1.34 | 0 |
| Wolfi | k3s-static-1.35 | 0 |
| Wolfi | k3s-static-1.36 | 0 |
| Wolfi | k3s-static-1.37 | 0 |
| Wolfi | k8sgpt | no fix |
| Wolfi | k8sgpt | 0.4.36-r1 |
| Wolfi | k8sgpt | 0 |
| Wolfi | kaniko | no fix |
| Wolfi | kaniko-warmer | no fix |
| Wolfi | ko | 0.19.0-r0 |
| Wolfi | kots | 1.131.1-r1 |
| Wolfi | kots | 1.131.0-r0 |
| Wolfi | kpt | 1.0.0-r0 |
| Wolfi | kubescape | 0 |
| Wolfi | kubescape-operator | no fix |
| Wolfi | kubevela-vela-cli | no fix |
| Wolfi | kubevela-vela-core | no fix |
| Wolfi | lazydocker | no fix |
| Wolfi | loki-3.6-promtail | no fix |
| Wolfi | manifest-tool | 0 |
| Wolfi | melange | no fix |
| Wolfi | nerdctl | 2.3.1-r0 |
| Wolfi | nuclei | 3.9.0-r0 |
| Wolfi | opentelemetry-operator-otel-allocator | 0.154.0-r0 |
| Wolfi | osv-scanner | 0 |
| Wolfi | podman | 6.0.0-r0 |
| Wolfi | portieris | 0.14.1-r0 |
| Wolfi | prometheus-3.10 | 0 |
| Wolfi | prometheus-3.11 | 0 |
| Wolfi | prometheus-3.8 | 0 |
| Wolfi | prometheus-3.9 | no fix |
| Wolfi | promxy | no fix |
| Wolfi | py3-docker | 0 |
| Wolfi | py3.10-docker | 0 |
| Wolfi | py3.11-docker | 0 |
| Wolfi | py3.12-docker | 0 |
| Wolfi | py3.13-docker | 0 |
| Wolfi | rancher-2.13 | 2.13.7-r0 |
| Wolfi | rancher-2.14 | 2.14.3-r0 |
| Wolfi | rancher-agent-2.13 | 2.13.7-r0 |
| Wolfi | rancher-agent-2.13 | 2.13.9-r4 |
| Wolfi | rancher-agent-2.13 | 0 |
| Wolfi | rancher-agent-2.14 | 2.14.3-r0 |
| Wolfi | rancher-machine | 0.15.0.144-r0 |
| Wolfi | rpk-25.3.10 | no fix |
| Wolfi | rpk-26.1.8 | no fix |
| Wolfi | rpk-26.1.9 | no fix |
| Wolfi | scorecard | 0 |
| Wolfi | skaffold | no fix |
| Wolfi | skopeo | 1.23.0-r0 |
| Wolfi | spire-agent | 1.15.2-r0 |
| Wolfi | telegraf-1.36 | no fix |
| Wolfi | telegraf-1.37 | no fix |
| Wolfi | telegraf-1.38 | no fix |
| Wolfi | teleport-18.6 | 0 |
| Wolfi | tkn | no fix |
| Wolfi | trivy | 0.70.0-r0 |
| Wolfi | trivy-operator | 0.30.1-r26 |
| Wolfi | trufflehog | no fix |
| Wolfi | tw | 0 |
| Wolfi | twt | 0 |
| Wolfi | undock | 0.14.0-r0 |
| Wolfi | vcluster | no fix |
| Wolfi | vcluster-cli | no fix |
| Wolfi | vcluster-syncer | no fix |
| Wolfi | xeol | no fix |
| Wolfi | zot | 2.1.17-r0 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260727T201416-160000.1.1 |