{"schemaVersion":3,"id":"CVE-2025-53945","aliases":["CGA-2676-v5hx-q949","CGA-27mh-9c57-qx2m","CGA-33vp-7jm3-4fmm","CGA-36c4-3x9x-7w7g","CGA-389p-33cf-qm28","CGA-3rr5-x8rq-8gpp","CGA-3x3p-gwhh-x2qv","CGA-52h2-fj3g-m4wv","CGA-5rrm-94p3-qc72","CGA-8qx7-r695-5g9h","CGA-98mf-h4hj-qv38","CGA-c2mx-2qfp-g5x6","CGA-c5c7-m4fx-v38j","CGA-cm2v-jc7v-g72m","CGA-cwf6-jx9j-ppcm","CGA-cxqg-vcgr-xjvf","CGA-f4hr-37qj-h9hh","CGA-f5h2-jp25-qxf3","CGA-gvfw-pqf3-pgx3","CGA-hp5h-w89r-h8r5","CGA-m6gh-55gh-c9qj","CGA-mffj-wgvp-77hp","CGA-p5mj-36m3-g4fh","CGA-p9r6-9gvc-g3ww","CGA-r68c-g65r-98x9","CGA-r9cm-5795-f6qq","CGA-rx59-px2x-w62x","CGA-w2h6-m66j-4p93","CGA-w7xc-fc26-2v8r","CGA-xx2h-wxjw-qh8g","GHSA-x6ph-r535-3vjw","GO-2025-3816","CGA-27jc-qpx7-m79h","CGA-8f94-9f6h-mhvf","CGA-cf98-2826-9vqc","CGA-gvjj-jhhx-rpvv","CGA-m5j2-x246-c9qw","CGA-rjhw-jpvc-c9q6"],"status":"published","duplicateOf":null,"title":null,"description":"apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue.","dates":{"published":"2025-07-18T15:35:17.325Z","modified":"2025-07-22T15:03:42.966Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":2.8,"impact":8.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":2.8,"impact":8.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":2.8,"impact":8.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00143,"percentile":0.03205,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.018000000000000002,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00125},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0012,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00143,"percentile":0.03205}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00133,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00143,"percentile":0.03205}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-276","name":"Incorrect Default Permissions","description":"During installation, installed file permissions are set to allow anyone to modify those files.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/276.html"}],"affected":[{"vendor":"chainguard","product":"cg","name":"cg","label":"cg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cg","purlType":"apk","versions":[{"text":"< 0_git20250730-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0_git20250730-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl","name":"chainctl","label":"chainctl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl","purlType":"apk","versions":[{"text":"< 0.2.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"docker-credential-cgr","name":"docker-credential-cgr","label":"docker-credential-cgr","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/docker-credential-cgr","purlType":"apk","versions":[{"text":"< 0.2.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gem-check","name":"gem-check","label":"gem-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gem-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gosh","name":"gosh","label":"gosh","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gosh","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"header-check","name":"header-check","label":"header-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/header-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"help-check","name":"help-check","label":"help-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/help-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ldd-check","name":"ldd-check","label":"ldd-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ldd-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"no-docs-check","name":"no-docs-check","label":"no-docs-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/no-docs-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"package-type-check","name":"package-type-check","label":"package-type-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/package-type-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"symlink-check","name":"symlink-check","label":"symlink-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/symlink-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"syspeek","name":"syspeek","label":"syspeek","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/syspeek","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tw","name":"tw","label":"tw","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tw","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tw-pip-check","name":"tw-pip-check","label":"tw-pip-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tw-pip-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"twt","name":"twt","label":"twt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/twt","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"usrmerge-tool","name":"usrmerge-tool","label":"usrmerge-tool","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/usrmerge-tool","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ver-check","name":"ver-check","label":"ver-check","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ver-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"verify-service","name":"verify-service","label":"verify-service","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/verify-service","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gem-check","name":"gem-check","label":"gem-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gem-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gosh","name":"gosh","label":"gosh","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gosh","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"header-check","name":"header-check","label":"header-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/header-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"help-check","name":"help-check","label":"help-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/help-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ldd-check","name":"ldd-check","label":"ldd-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ldd-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"no-docs-check","name":"no-docs-check","label":"no-docs-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/no-docs-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"package-type-check","name":"package-type-check","label":"package-type-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/package-type-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"symlink-check","name":"symlink-check","label":"symlink-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/symlink-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"syspeek","name":"syspeek","label":"syspeek","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/syspeek","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tw","name":"tw","label":"tw","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tw","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tw-pip-check","name":"tw-pip-check","label":"tw-pip-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tw-pip-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"twt","name":"twt","label":"twt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/twt","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"usrmerge-tool","name":"usrmerge-tool","label":"usrmerge-tool","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/usrmerge-tool","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ver-check","name":"ver-check","label":"ver-check","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ver-check","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"verify-service","name":"verify-service","label":"verify-service","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/verify-service","purlType":"apk","versions":[{"text":"< 0.0.19-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.19-r0","eol":null,"hubHref":null},{"vendor":"chainguard-dev","product":"apko","name":"apko","label":"apko","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.27.0, < 0.29.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.27.0, < 0.29.5","eol":null,"hubHref":"/vendor/chainguard-dev/apko"},{"vendor":"chainguard.dev","product":"apko","name":"chainguard.dev/apko","label":"apko","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/chainguard.dev/apko","purlType":"golang","versions":[{"text":"≥ 0.27.0, < 0.29.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.27.0, < 0.29.5","eol":null,"hubHref":null}],"affectedCount":35,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/chainguard-dev/apko/security/advisories/GHSA-x6ph-r535-3vjw","label":"github.com/chainguard-dev/apko/security/advisories/GHSA-x6ph-r535-3vjw","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9","label":"github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3","label":"github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/chainguard-dev/apko/releases/tag/v0.27.0","label":"github.com/chainguard-dev/apko/releases/tag/v0.27.0","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/chainguard-dev/apko/releases/tag/v0.29.5","label":"github.com/chainguard-dev/apko/releases/tag/v0.29.5","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53945.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53945.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53945","label":"nvd.nist.gov/vuln/detail/CVE-2025-53945","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/chainguard-dev/apko","label":"github.com/chainguard-dev/apko","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2025:15405-1"],"duplicates":[],"related":["CGA-3G3J-8396-2M48","OPENSUSE-SU-2025:15405-1"]},"timeline":[{"kind":"published","date":"2025-07-18T15:35:17.325Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-07-22T15:03:42.966Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T15:33:48.710Z","stale":false,"partial":false}}