AP
Product
apko
by chainguard-dev · last CVE Oct 5, 2026
10
CVEs
0
On KEV
8.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 7Medium 3Low 0
Watch

Add apko to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42576
6.5
0%
May 9
apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery
Affected: < 1.2.7
CVE-2026-105768
6.3
0%
Oct 5
apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root
Affected: 0.2.0 before 1.4.5
CVE-2026-25122
5.5
0%
Feb 4
apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams
Affected: >= 0.14.8, < 1.1.0
Showing 3