Kaniko

Latest news about Kaniko: context, sources and what to do.

1 article

Cybersecurity

Kaniko prior to 1.25.20 leaks Microsoft Entra ID tokens to attacker-controlled container registries due to unanchored regex parsing, rated CVSS 9.3.

CVSS 9.3 CRITICALCVE-2026-105769See vendor advisoryNo patch · mitigation

2 days ago2 min read