Migrating to Chainguard Images: less CVEs for safer container runtimes

Software supply chain attacks have become common in the industry lately, with the latest episode featuring the infamous CVE-202403904 and the xz's backdoors.

Whether malicious or unintentional, a CVE can pose as severe risk to organizations relying on a piece of affected software. The CVE database has over 200.000 entries and it just scratches the surface, since unreported exploitable vulnerabilities (a.k.a. zero-days) are a fairly common occurrence in the hacking scene.

For a long time, this was not …

attacks backdoors can chainguard container containers cve cves database docker images industry latest malicious organizations php piece risk safer security software software supply chain software supply chain attacks supply supply chain supply chain attacks unintentional