{
  "ticket_id": "CVE-2026-42574",
  "source": "cve",
  "cve_id": "CVE-2026-42574",
  "advisory_id": "GHSA-qq3r-w4hj-gjp6",
  "html_url": "https://github.com/chainguard-dev/apko/security/advisories/GHSA-qq3r-w4hj-gjp6",
  "references": [
    "https://github.com/chainguard-dev/apko/security/advisories/GHSA-qq3r-w4hj-gjp6",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-42574",
    "https://github.com/chainguard-dev/apko/commit/f5a96e1299ac81c7ea9441705ec467688086f442"
  ],
  "severity": "high",
  "cwe": ["CWE-22"],
  "cvss": {
    "nvd_v3_1_base_score": 7.5
  },
  "labels": ["security", "path-traversal", "symlink", "apko", "golang"],
  "state": "published"
}