Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for drone and related packages
published 3 months ago
Summary
A security issue affects drone, drone-fips, gitness and 3 more (Chainguard). The advisory does not describe the issue in detail. Update to 2.1.2-r5 or later. See the linked advisory for details.
What to do
- Update chainguard glow to version 2.1.2-r5.
- Update wolfi glow to version 2.1.2-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | drone | All versions |
| Chainguard | chainguard | drone-fips | All versions |
| Chainguard | chainguard | gitness | All versions |
| Chainguard | chainguard | glow |
< 2.1.2-r5 Fix: upgrade to 2.1.2-r5
|
| Chainguard | chainguard | trufflehog | All versions |
| Chainguard | chainguard | trufflehog-fips | All versions |
| Wolfi | wolfi | gitness | All versions |
| Wolfi | wolfi | glow |
< 2.1.2-r5 Fix: upgrade to 2.1.2-r5
|
| Wolfi | wolfi | trufflehog | All versions |
Original advisory text
CGA-472v-6vrr-8c84
Timeline
Published22 Jul 2026
Updated22 Jul 2026
First seen22 Jul 2026
Sources
CGA-472v-6vrr-8c84 · OSV
Track software like this
Free during beta