Vulnerability Database - OSV

GHSA-fpg8-7664-jc5q

Go/chainguard.dev/apko
Go/chainguard.dev/melange

melange: Incomplete package integrity verification allows data section substitution 10 Jul

Fix available
Severity - 8.3 (High)

CLEANSTART-2026-MS06455

CleanStart/melange

Security fix for ghsa-fpg8-7664-jc5q applied in: melange 0.56.1-r1 18 Sep

Fix available

CVE-2026-54174

github.com/chainguard-dev/melange

melange: Incomplete package integrity verification allows data section substitution 11 Sep

Fix available
Severity - 8.3 (High)

GO-2026-5968

Go/chainguard.dev/apko
Go/chainguard.dev/melange

melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko 17 Jul

Fix available

CGA-8rmr-x7w8-9m3h

Chainguard/cargobump
Wolfi/cargobump

See record for full details 11 Jul

Fix available
Severity - 8.3 (High)

CGA-2j35-fw67-43gg

Chainguard/dagdotdev
Wolfi/dagdotdev

See record for full details 11 Jul

Fix available
Severity - 8.3 (High)

CGA-gph5-mmp4-wp3r

Chainguard/cargobump
Wolfi/cargobump

See record for full details 11 Jul

Fix available
Severity - 8.3 (High)

MINI-2v5v-3h24-46w9

MinimOS/symlink-check
MinimOS/tw
MinimOS/twt

See record for full details 11 Jul

Fix available

MINI-mc47-6rpp-9mx5

MinimOS/pombump

See record for full details 11 Jul

Fix available

CGA-qm9h-37p9-hq4p

Chainguard/dagdotdev
Wolfi/dagdotdev

See record for full details 11 Jul

Fix available
Severity - 8.3 (High)