kaniko vulnerabilities

Known vulnerabilities in the kaniko package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Asymmetric Resource Consumption (Amplification)	<1.23.2-r15
L GHSA-mh63-6h87-95cp	<1.23.2-r15
L GHSA-265r-hfxg-fhmg	<1.23.2-r14
L Integer Overflow or Wraparound	<1.23.2-r14
L GHSA-qxp5-gwg8-xv66	<1.23.2-r13
L CVE-2025-22870	<1.23.2-r13
L CVE-2025-22869	<1.23.2-r12
L CVE-2025-22868	<1.23.2-r11
L CVE-2025-22866	<1.23.2-r10
L GHSA-3whm-j4xm-rv8x	<1.23.2-r10
L GHSA-7wrw-r4p8-38rx	<1.23.2-r9
L CVE-2024-45341	<1.23.2-r9
L CVE-2024-45336	<1.23.2-r9
L GHSA-3f6r-qh9c-x6mm	<1.23.2-r9
L GHSA-v725-9546-7q7m	<1.23.2-r8
L Resource Exhaustion	<1.23.2-r8
L GHSA-r9px-m959-cxf4	<1.23.2-r8
L Arbitrary Argument Injection	<1.23.2-r8
L CVE-2024-45338	<1.23.2-r7
L GHSA-w32m-9786-jp63	<1.23.2-r7
L GHSA-v778-237x-gjrc	<1.23.2-r6
L CVE-2024-45337	<1.23.2-r6
L Improper Handling of Exceptional Conditions	<1.23.2-r5
L GHSA-29wx-vh33-7x7r	<1.23.2-r5
L CVE-2024-34158	<1.23.2-r2
L GHSA-8xfx-rj4p-23jm	<1.23.2-r2
L GHSA-crqm-pwhx-j97f	<1.23.2-r2
L GHSA-j7vj-rw65-4v26	<1.23.2-r2
L CVE-2024-34155	<1.23.2-r2
L CVE-2024-34156	<1.23.2-r2
L GHSA-xr7q-jx4m-x55m	<1.23.2-r1
L GHSA-hw49-2p59-3mhj	<1.23.1-r1
L CVE-2024-24791	<1.23.1-r1
M CVE-2024-24789	<1.23.0-r1
C CVE-2024-24790	<1.23.0-r1
L GHSA-236w-p7wf-5ph8	<1.23.0-r1
L GHSA-49gw-vxvf-fc2g	<1.23.0-r1
L CVE-2024-32473	<1.22.0-r2
L GHSA-x84c-p2g9-rqv9	<1.22.0-r2
L CVE-2023-45288	<1.22.0-r1
L GHSA-4v7x-pqxf-cx7m	<1.22.0-r1
L GHSA-mq39-4gv4-mvpx	<1.21.1-r1
L CVE-2024-24786	<1.21.1-r1
L GHSA-8r3f-844c-mc37	<1.21.1-r1
L CVE-2024-29018	<1.21.1-r1
L GHSA-7ww5-4wqc-m92c	<1.21.0-r1
L GHSA-4v98-7qmw-rqr8	<1.20.1-r0
H Race Condition	<1.20.1-r0
H Exposure of Resource to Wrong Sphere	<1.20.1-r0
C Directory Traversal	<1.20.1-r0
L GHSA-9p26-698r-w4hx	<1.20.1-r0
L GHSA-m3r6-h7wv-7xxv	<1.20.1-r0
M Improper Check for Unusual or Exceptional Conditions	<1.20.1-r0
L GHSA-xr7r-f8xq-vfvv	<1.20.1-r0
L GHSA-wr6v-9f75-vh2g	<1.20.1-r0
C Incorrect Authorization	<1.20.1-r0
L GHSA-9763-4f94-gfch	<1.20.0-r0

Vulnerability

Vulnerable Version

Asymmetric Resource Consumption (Amplification)

<1.23.2-r15

GHSA-mh63-6h87-95cp

<1.23.2-r15

GHSA-265r-hfxg-fhmg

<1.23.2-r14

Integer Overflow or Wraparound

<1.23.2-r14

GHSA-qxp5-gwg8-xv66

<1.23.2-r13