https://advisories.gitlab.com/golang/chainguard.dev/apko/CVE-2026-42575/
apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution...
CVE-2026-42575 apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible): apko verifies the signature on...
downloaded apk