Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for act and related packages
published 5 months ago
Summary
A security issue affects act, amazon-ssm-agent, amazon-ssm-agent-ecs-exec and 78 more (Chainguard). The advisory does not describe the issue in detail. Update to 0.2.88-r4 or later. See the linked advisory for details.
What to do
- Update chainguard act to version 0.2.88-r4.
- Update chainguard amazon-ssm-agent to version 3.3.4364.0-r2.
- Update chainguard amazon-ssm-agent-ecs-exec to version 3.3.4364.0-r2.
- Update chainguard apko to version 1.2.13-r1.
- Update chainguard apko-fips to version 1.2.13-r1.
- Update chainguard argo-cd-3.3-compat to version 3.3.10-r3.
- Update chainguard argo-cd-3.4 to version 3.4.2-r2.
- Update chainguard argo-cd-3.4-compat to version 3.4.2-r2.
- Update chainguard argo-cd-fips-3.2 to version 3.2.12-r4.
- Update chainguard argo-cd-fips-3.2-compat to version 3.2.12-r4.
- Update chainguard argo-cd-fips-3.3 to version 3.3.10-r4.
- Update chainguard argo-cd-fips-3.3-compat to version 3.3.10-r4.
- Update chainguard argo-events to version 1.9.10-r22.
- Update chainguard cerbos to version 0.53.0-r4.
- Update chainguard cerbos-fips to version 0.53.0-r2.
- Update chainguard cerbosctl to version 0.53.0-r4.
- Update chainguard cerbosctl-fips to version 0.53.0-r2.
- Update chainguard cg to version 0.2.263-r1.
- Update chainguard cloudbeat-8.19 to version 8.19.15-r3.
- Update chainguard cloudbeat-9.0 to version 9.0.8-r23.
- Update chainguard cloudbeat-9.2 to version 9.2.8-r3.
- Update chainguard cloudbeat-9.3 to version 9.3.4-r5.
- Update chainguard cloudbeat-fips-8.17 to version 8.17.10-r25.
- Update chainguard cloudbeat-fips-9.0 to version 9.0.8-r26.
- Update chainguard coder-fips to version 2.32.4-r1.
- Update chainguard crossplane-2.0-crank to version 2.0.8-r3.
- Update chainguard crossplane-2.1-crank to version 2.1.5-r4.
- Update chainguard crossplane-fips-1.20-crank to version 1.20.7-r4.
- Update chainguard crossplane-fips-2.0-crank to version 2.0.8-r3.
- Update chainguard crossplane-fips-2.1-crank to version 2.1.5-r4.
- Update chainguard external-secrets-operator-2.2 to version 2.2.0-r10.
- Update chainguard external-secrets-operator-2.3 to version 2.3.0-r8.
- Update chainguard external-secrets-operator-2.5 to version 2.5.0-r1.
- Update chainguard flux-2.8 to version 2.8.8-r0.
- Update chainguard flux-fips-2.7 to version 2.7.5-r19.
- Update chainguard flux-fips-2.8 to version 2.8.8-r0.
- Update chainguard flux-image-automation-controller to version 1.1.4-r0.
- Update chainguard flux-image-automation-controller-fips to version 1.1.4-r0.
- Update chainguard gitaly-fips-18.9 to version 18.9.7-r1.
- Update chainguard gitlab-rails-ce-fips-18.10 to version 18.10.6-r2.
- Update chainguard gitlab-rails-ce-fips-18.9 to version 18.9.7-r2.
- Update chainguard gitlab-runner-18.10 to version 18.10.1-r9.
- Update chainguard gitlab-runner-18.9 to version 18.9.0-r13.
- Update chainguard gitlab-runner-fips-18.11 to version 18.11.3-r5.
- Update chainguard gitlab-runner-helper-18.9 to version 18.9.0-r13.
- Update chainguard gitlab-runner-helper-fips-18.11 to version 18.11.3-r5.
- Update chainguard gomplate-5 to version 5.1.0-r4.
- Update chainguard gomplate-fips-4 to version 4.3.3-r14.
- Update chainguard gomplate-fips-5 to version 5.1.0-r4.
- Update chainguard google-osconfig-agent to version 20251028.00-r18.
- Update chainguard goreleaser to version 2.15.4-r5.
- Update chainguard grype-db to version 0.53.3-r3.
- Update chainguard jfrog-cli to version 2.104.0-r1.
- Update chainguard k9s to version 0.50.18-r25.
- Update chainguard k9s-fips to version 0.50.18-r19.
- Update chainguard kaniko to version 1.25.15-r1.
- Update chainguard kargo to version 1.10.4-r1.
- Update chainguard kubescape to version 4.0.8-r4.
- Update chainguard kubescape-server-fips to version 4.0.8-r5.
- Update chainguard kubescape-server-fips-downloader to version 4.0.8-r5.
- Update chainguard kubevela-vela-cli to version 1.10.8-r7.
- Update chainguard kubevela-vela-core to version 1.10.8-r7.
- Update chainguard kyverno-cli-fips-1.15 to version 1.15.20-r5.
- Update chainguard kyverno-cli-fips-1.16 to version 1.16.4-r4.
- Update chainguard kyverno-cli-fips-1.17 to version 1.17.2-r5.
- Update chainguard mapotf to version 0.0.0_git20260426-r3.
- Update chainguard mapotf-fips to version 0.0.0_git20260426-r2.
- Update chainguard osv-scanner to version 2.3.8-r2.
- Update chainguard pulumi-language-dotnet to version 3.106.2-r2.
- Update chainguard rancher-fleet-cli-fips to version 0.15.1-r4.
- Update chainguard rancher-fleet-controller-fips to version 0.15.1-r4.
- Update chainguard redpanda-console to version 3.7.3-r0.
- Update chainguard skaffold to version 2.20.0-r1.
- Update chainguard skaffold-fips to version 2.20.0-r1.
- Update chainguard src-fingerprint to version 0.19.0-r51.
- Update chainguard steampipe to version 2.4.3-r1.
- Update chainguard trivy-operator to version 0.30.1-r10.
- Update chainguard trufflehog-fips to version 3.94.3-r6.
- Update chainguard witness to version 0.11.0-r4.
- Update chainguard xeol-fips to version 0.10.8-r40.
- Update chainguard zarf-fips to version 0.75.1-r5.
- Update wolfi act to version 0.2.88-r4.
- Update wolfi apko to version 1.2.13-r1.
- Update wolfi argo-cd-3.3-compat to version 3.3.10-r3.
- Update wolfi argo-cd-3.4 to version 3.4.2-r2.
- Update wolfi argo-cd-3.4-compat to version 3.4.2-r2.
- Update wolfi argo-events to version 1.9.10-r22.
- Update wolfi cerbos to version 0.53.0-r4.
- Update wolfi cerbosctl to version 0.53.0-r4.
- Update wolfi crossplane-2.1-crank to version 2.1.5-r4.
- Update wolfi external-secrets-operator-2.2 to version 2.2.0-r10.
- Update wolfi external-secrets-operator-2.3 to version 2.3.0-r8.
- Update wolfi external-secrets-operator-2.5 to version 2.5.0-r1.
- Update wolfi flux-2.8 to version 2.8.8-r0.
- Update wolfi flux-image-automation-controller to version 1.1.4-r0.
- Update wolfi gitlab-runner-18.10 to version 18.10.1-r9.
- Update wolfi gitlab-runner-18.9 to version 18.9.0-r13.
- Update wolfi gitlab-runner-helper-18.9 to version 18.9.0-r13.
- Update wolfi gomplate-5 to version 5.1.0-r4.
- Update wolfi goreleaser to version 2.15.4-r5.
- Update wolfi k9s to version 0.50.18-r25.
- Update wolfi kaniko to version 1.25.15-r1.
- Update wolfi kargo to version 1.10.4-r1.
- Update wolfi kubescape to version 4.0.8-r4.
- Update wolfi kubevela-vela-cli to version 1.10.8-r7.
- Update wolfi kubevela-vela-core to version 1.10.8-r7.
- Update wolfi osv-scanner to version 2.3.8-r2.
- Update wolfi pulumi-language-dotnet to version 3.106.2-r2.
- Update wolfi skaffold to version 2.20.0-r1.
- Update wolfi src-fingerprint to version 0.19.0-r51.
- Update wolfi steampipe to version 2.4.3-r1.
- Update wolfi trivy-operator to version 0.30.1-r10.
- Update wolfi witness to version 0.11.0-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | act |
< 0.2.88-r4 Fix: upgrade to 0.2.88-r4
|
| Chainguard | chainguard | amazon-ssm-agent |
< 3.3.4364.0-r2 Fix: upgrade to 3.3.4364.0-r2
|
| Chainguard | chainguard | amazon-ssm-agent-ecs-exec |
< 3.3.4364.0-r2 Fix: upgrade to 3.3.4364.0-r2
|
| Chainguard | chainguard | apko |
< 1.2.13-r1 Fix: upgrade to 1.2.13-r1
|
| Chainguard | chainguard | apko-fips |
< 1.2.13-r1 Fix: upgrade to 1.2.13-r1
|
| Chainguard | chainguard | argo-cd-3.3-compat |
< 3.3.10-r3 Fix: upgrade to 3.3.10-r3
|
| Chainguard | chainguard | argo-cd-3.4 |
< 3.4.2-r2 Fix: upgrade to 3.4.2-r2
|
| Chainguard | chainguard | argo-cd-3.4-compat |
< 3.4.2-r2 Fix: upgrade to 3.4.2-r2
|
| Chainguard | chainguard | argo-cd-fips-3.2 |
< 3.2.12-r4 Fix: upgrade to 3.2.12-r4
|
| Chainguard | chainguard | argo-cd-fips-3.2-compat |
< 3.2.12-r4 Fix: upgrade to 3.2.12-r4
|
| Chainguard | chainguard | argo-cd-fips-3.3 |
< 3.3.10-r4 Fix: upgrade to 3.3.10-r4
|
| Chainguard | chainguard | argo-cd-fips-3.3-compat |
< 3.3.10-r4 Fix: upgrade to 3.3.10-r4
|
| Chainguard | chainguard | argo-events |
< 1.9.10-r22 Fix: upgrade to 1.9.10-r22
|
| Chainguard | chainguard | cerbos |
< 0.53.0-r4 Fix: upgrade to 0.53.0-r4
|
| Chainguard | chainguard | cerbos-fips |
< 0.53.0-r2 Fix: upgrade to 0.53.0-r2
|
| Chainguard | chainguard | cerbosctl |
< 0.53.0-r4 Fix: upgrade to 0.53.0-r4
|
| Chainguard | chainguard | cerbosctl-fips |
< 0.53.0-r2 Fix: upgrade to 0.53.0-r2
|
| Chainguard | chainguard | cg |
< 0.2.263-r1 Fix: upgrade to 0.2.263-r1
|
| Chainguard | chainguard | cloudbeat-8.19 |
< 8.19.15-r3 Fix: upgrade to 8.19.15-r3
|
| Chainguard | chainguard | cloudbeat-9.0 |
< 9.0.8-r23 Fix: upgrade to 9.0.8-r23
|
| Chainguard | chainguard | cloudbeat-9.2 |
< 9.2.8-r3 Fix: upgrade to 9.2.8-r3
|
| Chainguard | chainguard | cloudbeat-9.3 |
< 9.3.4-r5 Fix: upgrade to 9.3.4-r5
|
| Chainguard | chainguard | cloudbeat-fips-8.17 |
< 8.17.10-r25 Fix: upgrade to 8.17.10-r25
|
| Chainguard | chainguard | cloudbeat-fips-9.0 |
< 9.0.8-r26 Fix: upgrade to 9.0.8-r26
|
| Chainguard | chainguard | coder-fips |
< 2.32.4-r1 Fix: upgrade to 2.32.4-r1
|
| Chainguard | chainguard | crossplane-2.0-crank |
< 2.0.8-r3 Fix: upgrade to 2.0.8-r3
|
| Chainguard | chainguard | crossplane-2.1-crank |
< 2.1.5-r4 Fix: upgrade to 2.1.5-r4
|
| Chainguard | chainguard | crossplane-fips-1.20-crank |
< 1.20.7-r4 Fix: upgrade to 1.20.7-r4
|
| Chainguard | chainguard | crossplane-fips-2.0-crank |
< 2.0.8-r3 Fix: upgrade to 2.0.8-r3
|
| Chainguard | chainguard | crossplane-fips-2.1-crank |
< 2.1.5-r4 Fix: upgrade to 2.1.5-r4
|
| Chainguard | chainguard | external-secrets-operator-2.2 |
< 2.2.0-r10 Fix: upgrade to 2.2.0-r10
|
| Chainguard | chainguard | external-secrets-operator-2.3 |
< 2.3.0-r8 Fix: upgrade to 2.3.0-r8
|
| Chainguard | chainguard | external-secrets-operator-2.5 |
< 2.5.0-r1 Fix: upgrade to 2.5.0-r1
|
| Chainguard | chainguard | flux-2.8 |
< 2.8.8-r0 Fix: upgrade to 2.8.8-r0
|
| Chainguard | chainguard | flux-fips-2.7 |
< 2.7.5-r19 Fix: upgrade to 2.7.5-r19
|
| Chainguard | chainguard | flux-fips-2.8 |
< 2.8.8-r0 Fix: upgrade to 2.8.8-r0
|
| Chainguard | chainguard | flux-image-automation-controller |
< 1.1.4-r0 Fix: upgrade to 1.1.4-r0
|
| Chainguard | chainguard | flux-image-automation-controller-fips |
< 1.1.4-r0 Fix: upgrade to 1.1.4-r0
|
| Chainguard | chainguard | gitaly-fips-18.9 |
< 18.9.7-r1 Fix: upgrade to 18.9.7-r1
|
| Chainguard | chainguard | gitlab-rails-ce-fips-18.10 |
< 18.10.6-r2 Fix: upgrade to 18.10.6-r2
|
| Chainguard | chainguard | gitlab-rails-ce-fips-18.9 |
< 18.9.7-r2 Fix: upgrade to 18.9.7-r2
|
| Chainguard | chainguard | gitlab-runner-18.10 |
< 18.10.1-r9 Fix: upgrade to 18.10.1-r9
|
| Chainguard | chainguard | gitlab-runner-18.9 |
< 18.9.0-r13 Fix: upgrade to 18.9.0-r13
|
| Chainguard | chainguard | gitlab-runner-fips-18.11 |
< 18.11.3-r5 Fix: upgrade to 18.11.3-r5
|
| Chainguard | chainguard | gitlab-runner-helper-18.9 |
< 18.9.0-r13 Fix: upgrade to 18.9.0-r13
|
| Chainguard | chainguard | gitlab-runner-helper-fips-18.11 |
< 18.11.3-r5 Fix: upgrade to 18.11.3-r5
|
| Chainguard | chainguard | gomplate-5 |
< 5.1.0-r4 Fix: upgrade to 5.1.0-r4
|
| Chainguard | chainguard | gomplate-fips-4 |
< 4.3.3-r14 Fix: upgrade to 4.3.3-r14
|
| Chainguard | chainguard | gomplate-fips-5 |
< 5.1.0-r4 Fix: upgrade to 5.1.0-r4
|
| Chainguard | chainguard | google-osconfig-agent |
< 20251028.00-r18 Fix: upgrade to 20251028.00-r18
|
Showing 50 of 113. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | goreleaser |
< 2.15.4-r5 Fix: upgrade to 2.15.4-r5
|
| Chainguard | chainguard | grype-db |
< 0.53.3-r3 Fix: upgrade to 0.53.3-r3
|
| Chainguard | chainguard | jfrog-cli |
< 2.104.0-r1 Fix: upgrade to 2.104.0-r1
|
| Chainguard | chainguard | k9s |
< 0.50.18-r25 Fix: upgrade to 0.50.18-r25
|
| Chainguard | chainguard | k9s-fips |
< 0.50.18-r19 Fix: upgrade to 0.50.18-r19
|
| Chainguard | chainguard | kaniko |
< 1.25.15-r1 Fix: upgrade to 1.25.15-r1
|
| Chainguard | chainguard | kargo |
< 1.10.4-r1 Fix: upgrade to 1.10.4-r1
|
| Chainguard | chainguard | kubescape |
< 4.0.8-r4 Fix: upgrade to 4.0.8-r4
|
| Chainguard | chainguard | kubescape-server-fips |
< 4.0.8-r5 Fix: upgrade to 4.0.8-r5
|
| Chainguard | chainguard | kubescape-server-fips-downloader |
< 4.0.8-r5 Fix: upgrade to 4.0.8-r5
|
| Chainguard | chainguard | kubevela-vela-cli |
< 1.10.8-r7 Fix: upgrade to 1.10.8-r7
|
| Chainguard | chainguard | kubevela-vela-core |
< 1.10.8-r7 Fix: upgrade to 1.10.8-r7
|
| Chainguard | chainguard | kyverno-cli-fips-1.15 |
< 1.15.20-r5 Fix: upgrade to 1.15.20-r5
|
| Chainguard | chainguard | kyverno-cli-fips-1.16 |
< 1.16.4-r4 Fix: upgrade to 1.16.4-r4
|
| Chainguard | chainguard | kyverno-cli-fips-1.17 |
< 1.17.2-r5 Fix: upgrade to 1.17.2-r5
|
| Chainguard | chainguard | mapotf |
< 0.0.0_git20260426-r3 Fix: upgrade to 0.0.0_git20260426-r3
|
| Chainguard | chainguard | mapotf-fips |
< 0.0.0_git20260426-r2 Fix: upgrade to 0.0.0_git20260426-r2
|
| Chainguard | chainguard | osv-scanner |
< 2.3.8-r2 Fix: upgrade to 2.3.8-r2
|
| Chainguard | chainguard | pulumi-language-dotnet |
< 3.106.2-r2 Fix: upgrade to 3.106.2-r2
|
| Chainguard | chainguard | rancher-fleet-cli-fips |
< 0.15.1-r4 Fix: upgrade to 0.15.1-r4
|
| Chainguard | chainguard | rancher-fleet-controller-fips |
< 0.15.1-r4 Fix: upgrade to 0.15.1-r4
|
| Chainguard | chainguard | redpanda-console |
< 3.7.3-r0 Fix: upgrade to 3.7.3-r0
|
| Chainguard | chainguard | skaffold |
< 2.20.0-r1 Fix: upgrade to 2.20.0-r1
|
| Chainguard | chainguard | skaffold-fips |
< 2.20.0-r1 Fix: upgrade to 2.20.0-r1
|
| Chainguard | chainguard | src-fingerprint |
< 0.19.0-r51 Fix: upgrade to 0.19.0-r51
|
| Chainguard | chainguard | steampipe |
< 2.4.3-r1 Fix: upgrade to 2.4.3-r1
|
| Chainguard | chainguard | trivy-operator |
< 0.30.1-r10 Fix: upgrade to 0.30.1-r10
|
| Chainguard | chainguard | trufflehog-fips |
< 3.94.3-r6 Fix: upgrade to 3.94.3-r6
|
| Chainguard | chainguard | witness |
< 0.11.0-r4 Fix: upgrade to 0.11.0-r4
|
| Chainguard | chainguard | xeol-fips |
< 0.10.8-r40 Fix: upgrade to 0.10.8-r40
|
| Chainguard | chainguard | zarf-fips |
< 0.75.1-r5 Fix: upgrade to 0.75.1-r5
|
| Wolfi | wolfi | act |
< 0.2.88-r4 Fix: upgrade to 0.2.88-r4
|
| Wolfi | wolfi | apko |
< 1.2.13-r1 Fix: upgrade to 1.2.13-r1
|
| Wolfi | wolfi | argo-cd-3.3-compat |
< 3.3.10-r3 Fix: upgrade to 3.3.10-r3
|
| Wolfi | wolfi | argo-cd-3.4 |
< 3.4.2-r2 Fix: upgrade to 3.4.2-r2
|
| Wolfi | wolfi | argo-cd-3.4-compat |
< 3.4.2-r2 Fix: upgrade to 3.4.2-r2
|
| Wolfi | wolfi | argo-events |
< 1.9.10-r22 Fix: upgrade to 1.9.10-r22
|
| Wolfi | wolfi | cerbos |
< 0.53.0-r4 Fix: upgrade to 0.53.0-r4
|
| Wolfi | wolfi | cerbosctl |
< 0.53.0-r4 Fix: upgrade to 0.53.0-r4
|
| Wolfi | wolfi | crossplane-2.1-crank |
< 2.1.5-r4 Fix: upgrade to 2.1.5-r4
|
| Wolfi | wolfi | external-secrets-operator-2.2 |
< 2.2.0-r10 Fix: upgrade to 2.2.0-r10
|
| Wolfi | wolfi | external-secrets-operator-2.3 |
< 2.3.0-r8 Fix: upgrade to 2.3.0-r8
|
| Wolfi | wolfi | external-secrets-operator-2.5 |
< 2.5.0-r1 Fix: upgrade to 2.5.0-r1
|
| Wolfi | wolfi | flux-2.8 |
< 2.8.8-r0 Fix: upgrade to 2.8.8-r0
|
| Wolfi | wolfi | flux-image-automation-controller |
< 1.1.4-r0 Fix: upgrade to 1.1.4-r0
|
| Wolfi | wolfi | gitlab-runner-18.10 |
< 18.10.1-r9 Fix: upgrade to 18.10.1-r9
|
| Wolfi | wolfi | gitlab-runner-18.9 |
< 18.9.0-r13 Fix: upgrade to 18.9.0-r13
|
| Wolfi | wolfi | gitlab-runner-helper-18.9 |
< 18.9.0-r13 Fix: upgrade to 18.9.0-r13
|
| Wolfi | wolfi | gomplate-5 |
< 5.1.0-r4 Fix: upgrade to 5.1.0-r4
|
| Wolfi | wolfi | goreleaser |
< 2.15.4-r5 Fix: upgrade to 2.15.4-r5
|
| Wolfi | wolfi | k9s |
< 0.50.18-r25 Fix: upgrade to 0.50.18-r25
|
| Wolfi | wolfi | kaniko |
< 1.25.15-r1 Fix: upgrade to 1.25.15-r1
|
| Wolfi | wolfi | kargo |
< 1.10.4-r1 Fix: upgrade to 1.10.4-r1
|
| Wolfi | wolfi | kubescape |
< 4.0.8-r4 Fix: upgrade to 4.0.8-r4
|
| Wolfi | wolfi | kubevela-vela-cli |
< 1.10.8-r7 Fix: upgrade to 1.10.8-r7
|
| Wolfi | wolfi | kubevela-vela-core |
< 1.10.8-r7 Fix: upgrade to 1.10.8-r7
|
| Wolfi | wolfi | osv-scanner |
< 2.3.8-r2 Fix: upgrade to 2.3.8-r2
|
| Wolfi | wolfi | pulumi-language-dotnet |
< 3.106.2-r2 Fix: upgrade to 3.106.2-r2
|
| Wolfi | wolfi | skaffold |
< 2.20.0-r1 Fix: upgrade to 2.20.0-r1
|
| Wolfi | wolfi | src-fingerprint |
< 0.19.0-r51 Fix: upgrade to 0.19.0-r51
|
| Wolfi | wolfi | steampipe |
< 2.4.3-r1 Fix: upgrade to 2.4.3-r1
|
| Wolfi | wolfi | trivy-operator |
< 0.30.1-r10 Fix: upgrade to 0.30.1-r10
|
| Wolfi | wolfi | witness |
< 0.11.0-r4 Fix: upgrade to 0.11.0-r4
|
Original advisory text
CGA-4fx8-v7vx-v65m
Timeline
Published20 May 2026
Updated21 May 2026
First seen21 May 2026
Track software like this
Free during beta