A vulnerability, which was classified as critical, was found in chainguard-dev apko 0.14.5/1.1.0/1.1.1. The impacted element is the function
dirFS of the file pkg/apk/fs/rwosfs.go. The manipulation results in path traversal.
This vulnerability is cataloged as CVE-2026-42574. The attack may be launched remotely. There is no exploit available.
You should upgrade the affected component.
