CVE-2026-46680
Fixed in a distro release EPSS <1%CVSS 7.3
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.
Products: containerd
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/containerd/containerd | 1.7.32 |
| Go | github.com/containerd/containerd/v2 | 2.0.9 |
| Go | github.com/containerd/containerd/v2 | 2.2.4 |
| Go | github.com/containerd/containerd/v2 | 2.3.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | amazon-ecs-agent | 1.103.1-r2 |
| Chainguard | amazon-ecs-agent-fips | 1.103.1-r2 |
| Chainguard | auditbeat-7 | no fix |
| Chainguard | auditbeat-fips-7 | no fix |
| Chainguard | buildctl | 0.30.0-r1 |
| Chainguard | buildctl-fips | 0.30.0-r2 |
| Chainguard | buildkitd | 0.30.0-r1 |
| Chainguard | buildkitd-fips | 0.30.0-r2 |
| Chainguard | cg | 0.2.264-r1 |
| Chainguard | chainctl | 0.2.264-r2 |
| Chainguard | chainctl-fips | 0.2.265-r0 |
| Chainguard | chaos-mesh | 2.8.2-r8 |
| Chainguard | chaos-mesh-daemon | 2.8.2-r8 |
| Chainguard | chaos-mesh-dashboard | 2.8.2-r8 |
| Chainguard | chaos-mesh-fips | 2.8.2-r9 |
| Chainguard | chaos-mesh-fips-daemon | 2.8.2-r9 |
| Chainguard | chaos-mesh-fips-dashboard | 2.8.2-r9 |
| Chainguard | chartmuseum | 0.16.5-r9 |
| Chainguard | chartmuseum-fips | 0.16.5-r8 |
| Chainguard | cloudbeat-8.17 | 8.17.10-r21 |
| Chainguard | cloudbeat-8.19 | 8.19.15-r4 |
| Chainguard | cloudbeat-9.0 | 9.0.8-r24 |
| Chainguard | cloudbeat-9.1 | 9.1.10-r16 |
| Chainguard | cloudbeat-9.2 | 9.2.8-r4 |
| Chainguard | cloudbeat-9.3 | 9.3.4-r6 |
| Chainguard | cloudbeat-9.4 | 9.4.1-r2 |
| Chainguard | cloudbeat-fips-8.17 | 8.17.10-r26 |
| Chainguard | cloudbeat-fips-8.19 | 8.19.15-r2 |
| Chainguard | cloudbeat-fips-9.0 | 9.0.8-r27 |
| Chainguard | cloudbeat-fips-9.1 | 9.1.10-r19 |
| Chainguard | cloudbeat-fips-9.2 | 9.2.8-r3 |
| Chainguard | cloudbeat-fips-9.3 | 9.3.4-r5 |
| Chainguard | cloudbeat-fips-9.4 | 9.4.1-r2 |
| Chainguard | cluster-api-helm-controller | 0.6.4-r2 |
| Chainguard | cluster-api-helm-controller-fips | 0.6.4-r2 |
| Chainguard | consul-k8s-1.1-cli | 1.1.18-r38 |
| Chainguard | consul-k8s-1.3-cli | 1.3.9-r41 |
| Chainguard | consul-k8s-1.4-cli | 1.4.10-r25 |
| Chainguard | consul-k8s-1.5-cli | 1.5.9-r27 |
| Chainguard | consul-k8s-1.6-cli | 1.6.10-r19 |
| Chainguard | consul-k8s-1.7-cli | 1.7.13-r7 |
| Chainguard | consul-k8s-1.9-cli | 1.9.7-r4 |
| Chainguard | consul-k8s-fips-1.1-cli | 1.1.18-r37 |
| Chainguard | consul-k8s-fips-1.3-cli | 1.3.9-r36 |
| Chainguard | consul-k8s-fips-1.4-cli | 1.4.10-r26 |
| Chainguard | consul-k8s-fips-1.5-cli | 1.5.9-r28 |
| Chainguard | consul-k8s-fips-1.6-cli | 1.6.10-r20 |
| Chainguard | consul-k8s-fips-1.7-cli | 1.7.13-r10 |
| Chainguard | consul-k8s-fips-1.9-cli | 1.9.7-r3 |
| Chainguard | containerd-2 | 2.3.1-r0 |
| Chainguard | containerd-2.1 | no fix |
| Chainguard | containerd-fips | 2.3.1-r0 |
| Chainguard | containerd-shim-runc-v2-2 | 2.3.1-r0 |
| Chainguard | containerd-shim-runc-v2-2.1 | no fix |
| Chainguard | containerd-shim-runc-v2-fips | 2.3.1-r0 |
| Chainguard | containerd-stress-2 | 2.3.1-r0 |
| Chainguard | containerd-stress-2.1 | no fix |
| Chainguard | containerd-stress-fips | 2.3.1-r0 |
| Chainguard | ctop | 0.7.7-r35 |
| Chainguard | ctr-2 | 2.3.1-r0 |
| Chainguard | ctr-2.1 | no fix |
| Chainguard | ctr-fips | 2.3.1-r0 |
| Chainguard | dagger | 0.20.8-r5 |
| Chainguard | datadog-agent-7.71 | 7.71.2-r27 |
| Chainguard | datadog-agent-7.72 | 7.72.4-r28 |
| Chainguard | datadog-agent-7.73 | 7.73.3-r19 |
| Chainguard | datadog-agent-7.74 | 7.74.1-r20 |
| Chainguard | datadog-agent-7.75 | no fix |
| Chainguard | datadog-agent-7.76 | 7.76.3-r41 |
| Chainguard | datadog-agent-7.76 | no fix |
| Chainguard | datadog-agent-7.76 | 7.76.3-r18 |
| Chainguard | datadog-agent-7.77 | 7.77.3-r13 |
| Chainguard | datadog-agent-7.78 | 7.78.4-r8 |
| Chainguard | datadog-agent-fips-7.71 | 7.71.2-r21 |
| Chainguard | datadog-agent-fips-7.72 | 7.72.4-r28 |
| Chainguard | datadog-agent-fips-7.73 | 7.73.3-r19 |
| Chainguard | datadog-agent-fips-7.74 | 7.74.1-r21 |
| Chainguard | datadog-agent-fips-7.75 | no fix |
| Chainguard | datadog-agent-fips-7.76 | 7.76.3-r17 |
| Chainguard | datadog-agent-fips-7.77 | 7.77.3-r11 |
| Chainguard | datadog-agent-fips-7.78 | 7.78.4-r5 |
| Chainguard | docker-cli-buildx | 0.34.1-r1 |
| Chainguard | docker-cli-buildx-fips | 0.34.1-r1 |
| Chainguard | docker-compose | 5.1.4-r1 |
| Chainguard | docker-compose-fips | 5.1.4-r1 |
| Chainguard | dockerd-28 | no fix |
| Chainguard | dockerd-29 | 29.5.2-r1 |
| Chainguard | dockerd-fips-28 | no fix |
| Chainguard | dockerd-fips-29 | 29.5.2-r1 |
| Chainguard | dogstatsd-7.71 | 7.71.2-r27 |
| Chainguard | dogstatsd-7.72 | 7.72.4-r28 |
| Chainguard | dogstatsd-7.73 | 7.73.3-r19 |
| Chainguard | dogstatsd-7.74 | 7.74.1-r20 |
| Chainguard | dogstatsd-7.75 | no fix |
| Chainguard | dogstatsd-7.76 | 7.76.3-r18 |
| Chainguard | dogstatsd-7.77 | 7.77.3-r13 |
| Chainguard | dogstatsd-7.78 | 7.78.4-r8 |
| Chainguard | eks-node-monitoring-agent | 1.6.5-r1 |
| Chainguard | eks-node-monitoring-agent-fips | 1.6.5-r1 |
| Chainguard | eksctl | 0.226.0-r2 |
| Chainguard | envoy-gateway-egctl | 1.8.0-r1 |
| Chainguard | envoy-gateway-fips-egctl | 1.8.0-r2 |
| Chainguard | falco-no-driver | 0.45.0-r0 |
| Chainguard | filebeat-7 | no fix |
| Chainguard | filebeat-fips-7 | no fix |
| Chainguard | filebeat-oss-7 | no fix |
| Chainguard | filebeat-oss-fips-7 | no fix |
| Chainguard | fuse-overlayfs-snapshotter | 2.1.7-r14 |
| Chainguard | gatekeeper-3.20-gator | no fix |
| Chainguard | gatekeeper-3.21-gator | 3.21.1-r10 |
| Chainguard | gitlab-rails-ce-18.1 | no fix |
| Chainguard | gitlab-rails-ce-18.10 | 18.10.6-r2 |
| Chainguard | gitlab-rails-ce-18.11 | 18.11.3-r2 |
| Chainguard | gitlab-rails-ce-18.4 | no fix |
| Chainguard | gitlab-rails-ce-18.5 | no fix |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | 19.0.1-r4 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 18.1.6-r13 |
| Chainguard | gitlab-rails-ce-fips-18.10 | 18.10.6-r3 |
| Chainguard | gitlab-rails-ce-fips-18.11 | 18.11.3-r3 |
| Chainguard | gitlab-rails-ce-fips-18.4 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.0 | 19.0.1-r3 |
| Chainguard | gogatekeeper | 4.9.0-r1 |
| Chainguard | google-osconfig-agent | 20251028.00-r19 |
| Chainguard | grype | 0.112.0-r4 |
| Chainguard | grype-db | 0.53.3-r4 |
| Chainguard | grype-fips | 0.112.0-r4 |
| Chainguard | headlamp | 0.42.0-r3 |
| Chainguard | headlamp-fips | 0.42.0-r4 |
| Chainguard | heartbeat-7 | no fix |
| Chainguard | heartbeat-fips-7 | no fix |
| Chainguard | helm-3 | 3.22.0-r0 |
| Chainguard | helm-3 | 3.21.0-r1 |
| Chainguard | helm-exporter | 1.3.0-r8 |
| Chainguard | helm-exporter-fips | 1.3.0-r8 |
| Chainguard | helm-fips-3 | 3.21.0-r2 |
| Chainguard | helm-mapkubeapis | 0.6.1-r18 |
| Chainguard | helm-operator | 1.42.2-r7 |
| Chainguard | helm-operator-fips | 1.42.2-r5 |
| Chainguard | helm-push | 0.11.1-r11 |
| Chainguard | helm-set-status | 0.3.0-r17 |
| Chainguard | jfrog-cli | 2.104.1-r1 |
| Chainguard | k3s-static | 1.36.1.1-r1 |
| Chainguard | k3s-static-1.32 | 1.32.13.1-r21 |
| Chainguard | k3s-static-1.33 | 1.33.12.1-r4 |
| Chainguard | k3s-static-1.34 | 1.34.9.1-r0 |
| Chainguard | k3s-static-1.35 | 1.35.3.1-r12 |
| Chainguard | k8sgpt | 0.4.33-r3 |
| Chainguard | k8ssandra-client | 0.8.11-r4 |
| Chainguard | k8ssandra-client-fips | 0.8.11-r3 |
| Chainguard | k9s | 0.50.18-r26 |
| Chainguard | k9s-fips | 0.50.18-r20 |
| Chainguard | kaniko | 1.25.15-r2 |
| Chainguard | kaniko-fips | 1.25.15-r2 |
| Chainguard | kaniko-warmer | 1.25.15-r2 |
| Chainguard | kaniko-warmer-fips | 1.25.15-r2 |
| Chainguard | kargo | 1.10.4-r2 |
| Chainguard | kgateway-2.4 | 2.4.2-r1 |
| Chainguard | kgateway-fips-2.4 | 2.4.2-r1 |
| Chainguard | kots | 1.130.4-r1 |
| Chainguard | kube-arangodb-1.3 | no fix |
| Chainguard | kube-arangodb-1.4 | 1.4.3-r5 |
| Chainguard | kube-arangodb-fips-1.3 | no fix |
| Chainguard | kube-arangodb-fips-1.4 | 1.4.3-r3 |
| Chainguard | kube-mgmt | 11.0.7-r1 |
| Chainguard | kube-mgmt-fips | 11.0.7-r1 |
| Chainguard | kubescape | 4.0.8-r5 |
| Chainguard | kubescape-operator | 0.2.142-r2 |
| Chainguard | kubescape-operator-fips | 0.2.142-r2 |
| Chainguard | kubescape-server | 4.0.8-r4 |
| Chainguard | kubescape-server-downloader | 4.0.8-r4 |
| Chainguard | kubescape-server-fips | 4.0.8-r6 |
| Chainguard | kubescape-server-fips-downloader | 4.0.8-r6 |
| Chainguard | kubevela-vela-cli | 1.10.8-r8 |
| Chainguard | kubevela-vela-cli-fips | 1.10.8-r9 |
| Chainguard | kubevela-vela-core | 1.10.8-r8 |
| Chainguard | kubevela-vela-core-fips | 1.10.8-r9 |
| Chainguard | linkerd2-cli | 26.5.3-r0 |
| Chainguard | linkerd2-controller | 26.5.3-r0 |
| Chainguard | linkerd2-fips-cli | 26.5.3-r1 |
| Chainguard | linkerd2-fips-controller | 26.5.3-r1 |
| Chainguard | linkerd2-fips-metrics-api | 26.5.3-r1 |
| Chainguard | linkerd2-fips-tap | 26.5.3-r1 |
| Chainguard | linkerd2-fips-web | 26.5.3-r1 |
| Chainguard | linkerd2-metrics-api | 26.5.2-r1 |
| Chainguard | linkerd2-metrics-api | 26.5.3-r0 |
| Chainguard | linkerd2-tap | 26.5.3-r0 |
| Chainguard | linkerd2-web | 26.5.3-r0 |
| Chainguard | livekit-cli | 2.16.3-r3 |
| Chainguard | manifest-tool | 2.2.2-r1 |
| Chainguard | metricbeat-7 | no fix |
| Chainguard | metricbeat-fips-7 | no fix |
| Chainguard | neuvector-controller | 5.5.1-r6 |
| Chainguard | neuvector-controller-fips | 5.5.1-r4 |
| Chainguard | neuvector-enforcer | 5.5.1-r6 |
| Chainguard | neuvector-enforcer-fips | 5.5.1-r4 |
| Chainguard | neuvector-scanner | 4.172-r1 |
| Chainguard | neuvector-scanner-task | 4.172-r1 |
| Chainguard | neuvector-scanner-task-fips | 4.172-r0 |
| Chainguard | neuvector-scanner-task-fips | 4.170-r1 |
| Chainguard | neuvector-upgrader | 5.5.1-r6 |
| Chainguard | neuvector-upgrader-fips | 5.5.1-r4 |
| Chainguard | newrelic-infrastructure-agent | 1.75.0-r1 |
| Chainguard | newrelic-infrastructure-agent-fips | 1.75.0-r1 |
| Chainguard | opa | 1.16.2-r2 |
| Chainguard | opa-envoy | 1.16.2-r1 |
| Chainguard | opa-fips | 1.16.2-r1 |
| Chainguard | opa-fips-envoy | 1.16.2-r1 |
| Chainguard | osv-scanner | 2.3.8-r3 |
| Chainguard | packer | 1.15.3-r7 |
| Chainguard | packer-fips | 1.15.3-r5 |
| Chainguard | rancher-2.12 | 2.12.9-r5 |
| Chainguard | rancher-2.13 | 2.13.5-r5 |
| Chainguard | rancher-2.14 | 2.14.1-r2 |
| Chainguard | rancher-agent-2.12 | 2.12.9-r5 |
| Chainguard | rancher-agent-2.13 | 2.13.9-r4 |
| Chainguard | rancher-agent-2.13 | 2.13.5-r5 |
| Chainguard | rancher-agent-2.14 | 2.14.1-r2 |
| Chainguard | rancher-helm-3 | 3.20.0-r12 |
| Chainguard | redpanda-operator | 26.1.4-r1 |
| Chainguard | redpanda-operator-25.1 | 25.1.4-r3 |
| Chainguard | redpanda-operator-25.2 | 25.2.4-r3 |
| Chainguard | redpanda-operator-25.3 | 25.3.5-r1 |
| Chainguard | redpanda-operator-26.1 | 26.1.4-r1 |
| Chainguard | scorecard | 5.5.0-r4 |
| Chainguard | skaffold | 2.21.0-r2 |
| Chainguard | skaffold-fips | 2.21.0-r1 |
| Chainguard | spegel | 0.7.1-r1 |
| Chainguard | spegel-fips | 0.7.1-r1 |
| Chainguard | steampipe | 2.4.3-r2 |
| Chainguard | syft | 1.44.0-r5 |
| Chainguard | syft-fips | 1.44.0-r4 |
| Chainguard | tekton-pipelines-controller-0.68 | no fix |
| Chainguard | tekton-pipelines-controller-fips-0.68 | no fix |
| Chainguard | tekton-pipelines-entrypoint-0.68 | no fix |
| Chainguard | tekton-pipelines-entrypoint-fips-0.68 | no fix |
| Chainguard | tekton-pipelines-sidecarlogresults-0.68 | no fix |
| Chainguard | tekton-pipelines-sidecarlogresults-fips-0.68 | no fix |
| Chainguard | teleport-17 | 17.7.24-r0 |
| Chainguard | teleport-18 | 18.8.2-r1 |
| Chainguard | teleport-18.6 | 18.6.8-r19 |
| Chainguard | tigera-operator-1.40 | 1.40.11-r1 |
| Chainguard | tigera-operator-1.41 | 1.41.1-r13 |
| Chainguard | tigera-operator-1.42 | 1.42.0-r4 |
| Chainguard | tigera-operator-fips-1.40 | 1.40.11-r1 |
| Chainguard | tigera-operator-fips-1.41 | 1.41.1-r10 |
| Chainguard | tigera-operator-fips-1.42 | 1.42.0-r2 |
| Chainguard | trivy | 0.70.0-r1 |
| Chainguard | trivy-fips | 0.69.3-r12 |
| Chainguard | trivy-operator | 0.30.1-r11 |
| Chainguard | trivy-operator-fips | 0.30.1-r8 |
| Chainguard | tw | 0.0.48-r1 |
| Chainguard | twt | 0.0.48-r1 |
| Chainguard | upwind-agent | 0.130.0-r0 |
| Chainguard | wolfictl | 0.39.16-r2 |
| Chainguard | xeol | 0.10.8-r41 |
| Chainguard | xeol-fips | 0.10.8-r41 |
| Chainguard | zarf | 0.76.0-r3 |
| Chainguard | zarf-fips | 0.76.0-r2 |
| Chainguard | zot | 2.1.17-r2 |
| Debian 12 | containerd | no fix |
| Debian 13 | containerd | no fix |
| Debian 14 | containerd | 2.1.9+ds1-1 |
| Red Hat hummingbird 1 | trivy | 0:0.72.0-0.1.hum1 |
| Ubuntu 22.04 LTS | containerd | no fix |
| Ubuntu 24.04 LTS | containerd-app | no fix |
| Ubuntu 25.10 | containerd | no fix |
| Ubuntu 25.10 | containerd-app | no fix |
| Ubuntu 25.10 | containerd-stable | no fix |
| Ubuntu 26.04 LTS | containerd-app | no fix |
| Ubuntu 26.04 LTS | containerd-stable | no fix |
| Ubuntu 26.10 | containerd | no fix |
| Ubuntu 26.10 | containerd-app | no fix |
| Ubuntu 26.10 | containerd-stable | no fix |
| Ubuntu Pro 16.04 LTS | containerd | no fix |
| Ubuntu Pro 18.04 LTS | containerd | no fix |
| Ubuntu Pro 20.04 LTS | containerd | no fix |
| Ubuntu Pro 20.04 LTS | containerd-app | no fix |
| Ubuntu Pro 22.04 LTS | containerd-app | no fix |
| Ubuntu Pro 24.04 LTS | containerd | no fix |
| Ubuntu Pro 26.04 LTS | containerd | no fix |
| Wolfi | buildctl | 0.30.0-r1 |
| Wolfi | buildkitd | 0.30.0-r1 |
| Wolfi | chartmuseum | 0.16.5-r9 |
| Wolfi | cluster-api-helm-controller | 0.6.4-r2 |
| Wolfi | consul-k8s-1.9-cli | 1.9.7-r4 |
| Wolfi | containerd-2 | 2.3.1-r0 |
| Wolfi | containerd-shim-runc-v2-2 | 2.3.1-r0 |
| Wolfi | containerd-stress-2 | 2.3.1-r0 |
| Wolfi | ctop | 0.7.7-r35 |
| Wolfi | ctr-2 | 2.3.1-r0 |
| Wolfi | dagger | 0.20.8-r5 |
| Wolfi | datadog-agent-7.72 | 7.72.4-r28 |
| Wolfi | datadog-agent-7.73 | 7.73.3-r19 |
| Wolfi | datadog-agent-7.74 | 7.74.1-r20 |
| Wolfi | datadog-agent-7.75 | no fix |
| Wolfi | datadog-agent-7.76 | 7.76.3-r18 |
| Wolfi | datadog-agent-7.76 | 7.76.3-r41 |
| Wolfi | datadog-agent-7.76 | no fix |
| Wolfi | datadog-agent-7.77 | 7.77.3-r13 |
| Wolfi | datadog-agent-7.78 | 7.78.4-r8 |
| Wolfi | docker-cli-buildx | 0.34.1-r1 |
| Wolfi | docker-compose | 5.1.4-r1 |
| Wolfi | dockerd-28 | no fix |
| Wolfi | dockerd-29 | 29.5.2-r1 |
| Wolfi | dogstatsd-7.72 | 7.72.4-r28 |
| Wolfi | dogstatsd-7.73 | 7.73.3-r19 |
| Wolfi | dogstatsd-7.75 | no fix |
| Wolfi | dogstatsd-7.76 | 7.76.3-r18 |
| Wolfi | dogstatsd-7.77 | 7.77.3-r13 |
| Wolfi | dogstatsd-7.78 | 7.78.4-r8 |
| Wolfi | eksctl | 0.226.0-r2 |
| Wolfi | envoy-gateway-egctl | 1.8.0-r1 |
| Wolfi | falco-no-driver | 0.45.0-r0 |
| Wolfi | fuse-overlayfs-snapshotter | 2.1.7-r14 |
| Wolfi | gatekeeper-3.21-gator | 3.21.1-r10 |
| Wolfi | gogatekeeper | 4.9.0-r1 |
| Wolfi | grype | 0.112.0-r4 |
| Wolfi | headlamp | 0.42.0-r3 |
| Wolfi | helm-3 | 3.21.0-r1 |
| Wolfi | helm-3 | 3.22.0-r0 |
| Wolfi | helm-mapkubeapis | 0.6.1-r18 |
| Wolfi | helm-operator | 1.42.2-r7 |
| Wolfi | helm-push | 0.11.1-r11 |
| Wolfi | helm-set-status | 0.3.0-r17 |
| Wolfi | k3s-static | 1.36.1.1-r1 |
| Wolfi | k3s-static-1.32 | 1.32.13.1-r21 |
| Wolfi | k3s-static-1.33 | 1.33.12.1-r4 |
| Wolfi | k3s-static-1.34 | 1.34.9.1-r0 |
| Wolfi | k3s-static-1.35 | 1.35.3.1-r12 |
| Wolfi | k8sgpt | 0.4.33-r3 |
| Wolfi | k8ssandra-client | 0.8.11-r4 |
| Wolfi | k9s | 0.50.18-r26 |
| Wolfi | kaniko | 1.25.15-r2 |
| Wolfi | kaniko-warmer | 1.25.15-r2 |
| Wolfi | kargo | 1.10.4-r2 |
| Wolfi | kots | 1.130.4-r1 |
| Wolfi | kube-arangodb-1.4 | 1.4.3-r5 |
| Wolfi | kubescape | 4.0.8-r5 |
| Wolfi | kubescape-operator | 0.2.142-r2 |
| Wolfi | kubevela-vela-cli | 1.10.8-r8 |
| Wolfi | kubevela-vela-core | 1.10.8-r8 |
| Wolfi | linkerd2-cli | 26.5.3-r0 |
| Wolfi | linkerd2-controller | 26.5.3-r0 |
| Wolfi | linkerd2-metrics-api | 26.5.3-r0 |
| Wolfi | linkerd2-metrics-api | 26.5.2-r1 |
| Wolfi | linkerd2-tap | 26.5.3-r0 |
| Wolfi | linkerd2-web | 26.5.3-r0 |
| Wolfi | manifest-tool | 2.2.2-r1 |
| Wolfi | neuvector-scanner | 4.172-r1 |
| Wolfi | neuvector-scanner-task | 4.172-r1 |
| Wolfi | newrelic-infrastructure-agent | 1.75.0-r1 |
| Wolfi | opa | 1.16.2-r2 |
| Wolfi | opa-envoy | 1.16.2-r1 |
| Wolfi | osv-scanner | 2.3.8-r3 |
| Wolfi | rancher-2.13 | 2.13.5-r5 |
| Wolfi | rancher-2.14 | 2.14.1-r2 |
| Wolfi | rancher-agent-2.13 | 2.13.5-r5 |
| Wolfi | rancher-agent-2.13 | 2.13.9-r4 |
| Wolfi | rancher-agent-2.14 | 2.14.1-r2 |
| Wolfi | rancher-helm-3 | 3.20.0-r12 |
| Wolfi | scorecard | 5.5.0-r4 |
| Wolfi | skaffold | 2.21.0-r2 |
| Wolfi | spegel | 0.7.1-r1 |
| Wolfi | steampipe | 2.4.3-r2 |
| Wolfi | syft | 1.44.0-r5 |
| Wolfi | teleport-18.6 | 18.6.8-r19 |
| Wolfi | tigera-operator-1.40 | 1.40.11-r1 |
| Wolfi | tigera-operator-1.41 | 1.41.1-r13 |
| Wolfi | tigera-operator-1.42 | 1.42.0-r4 |
| Wolfi | trivy | 0.70.0-r1 |
| Wolfi | trivy-operator | 0.30.1-r11 |
| Wolfi | tw | 0.0.48-r1 |
| Wolfi | twt | 0.0.48-r1 |
| Wolfi | wolfictl | 0.39.16-r2 |
| Wolfi | xeol | 0.10.8-r41 |
| Wolfi | zarf | 0.76.0-r3 |
| Wolfi | zot | 2.1.17-r2 |
| openSUSE Leap 16.0 | containerd | 1.7.33-160000.1.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Leap 16.0 | trivy | 0.71.2-160000.1.1 |
| openSUSE Tumbleweed | containerd | 1.7.33-1.1 |
| openSUSE Tumbleweed | trivy | 0.71.1-2.1 |