options

Jan 30, 2026 GO-2026-4410

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ SizeLimits SizeLimits

+ type SizeLimits struct

+ APKControlMaxSize int64

+ APKDataMaxSize int64

+ APKIndexDecompressedMaxSize int64

+ HTTPResponseMaxSize int64

+ func DefaultSizeLimits() SizeLimits

Jan 23, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 16, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ PackageGetter apk.PackageGetter

Jan 15, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 14, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 12, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 9, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ SBOMGenerators []generator.Generator

Jan 5, 2026 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 17, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 17, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 17, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 12, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 12, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 4, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 3, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 27, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 22, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 20, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 18, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 17, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 15, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 6, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 4, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 4, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 27, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 16, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 9, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 7, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 30, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 26, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 15, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 13, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 10, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 4, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 2, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Aug 28, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Aug 20, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Aug 15, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Aug 11, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Aug 9, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 30, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 29, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 29, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 25, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 21, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 18, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 16, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 16, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 16, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 15, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 8, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 3, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 1, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jun 30, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jun 30, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 29, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 29, 2025

retracted

GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 15, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 13, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 12, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 8, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 7, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

May 5, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 28, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 23, 2025 GO-2025-3816 +3 more

  GO-2025-3816: apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 18, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 15, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 13, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Apr 1, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Mar 19, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Mar 13, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Mar 12, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Mar 8, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Feb 14, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Feb 12, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 30, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ Transport http.RoundTripper

Jan 22, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 22, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 8, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jan 6, 2025 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 20, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 19, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 14, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 13, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 13, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 11, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Dec 11, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 20, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 14, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 7, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Nov 4, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 31, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 29, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 28, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 25, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Oct 24, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ SharedCache *apk.Cache

Sep 20, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 19, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 16, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 13, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Sep 11, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 24, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jul 2, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ IgnoreSignatures bool

Jun 18, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

type Options

+ ExtraBuildRepos []string

+ ExtraRuntimeRepos []string

+ IncludePaths []string

Jun 11, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Jun 5, 2024 GO-2026-4405 +2 more

  GO-2026-4405: apko has a path traversal in apko dirFS which allows filesystem writes outside base in chainguard.dev/apko

  GO-2026-4406: apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams in chainguard.dev/apko

  GO-2026-4410: apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams in chainguard.dev/apko

Changes in this version

+ type Auth struct

+ Pass string

+ User string

type Options

+ Auth map[string]Auth

May 31, 2024

Changes in this version

type Options

+ Pass string

+ User string

May 29, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

May 24, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

May 23, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

May 7, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ ImageConfigChecksum string

+ ImageConfigFile string

Jan 30, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Jan 10, 2024 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Dec 28, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Dec 20, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Dec 20, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ Lockfile string

Nov 29, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Nov 16, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Oct 30, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Oct 26, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Oct 17, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ Offline bool

Jul 28, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Jun 30, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ CacheDir string

+ ExtraPackages []string

Apr 28, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Mar 29, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Mar 16, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Feb 24, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Feb 23, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ StageTags string

Feb 14, 2023 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Dec 6, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ Local bool

+ PackageVersionTag string

+ PackageVersionTagPrefix string

+ PackageVersionTagStem bool

+ TagSuffix string

Jul 18, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ TempDirPath string

+ WithVCS bool

+ func (o *Options) Logger() *logrus.Entry

+ func (o *Options) TempDir() string

+ func (o Options) TarballFileName() string

Jun 2, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

type Options

+ UseDockerMediaTypes bool

Apr 15, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Apr 14, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Apr 13, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Apr 12, 2022 GO-2024-2899

  GO-2024-2899: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko

Changes in this version

+ var Default = Options

+ type Options struct

+ Arch types.Architecture

+ ExtraKeyFiles []string

+ ExtraRepos []string

+ Log *log.Logger

+ SBOMFormats []string

+ SBOMPath string

+ SourceDateEpoch time.Time

+ Tags []string

+ TarballPath string

+ UseProot bool

+ WantSBOM bool

+ WorkDir string

+ func (o *Options) Summarize()