apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-42576 · CVE overview and exploitation status

EUVD-2026-28934

GHSA-m7hm-vm4x-28jf

GO-2026-5497

cve-program · CVE-2026-42576

• https://github.com/chainguard-dev/apko/security/advisories/GHSA-m7hm-vm4x-28jf
• https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1
• https://github.com/chainguard-dev/apko/releases/tag/v1.2.7

euvd · EUVD-2026-28934

• https://github.com/chainguard-dev/apko/security/advisories/GHSA-m7hm-vm4x-28jf
• https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1
• https://github.com/chainguard-dev/apko/releases/tag/v1.2.7

nvd · CVE-2026-42576

• https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1
• https://github.com/chainguard-dev/apko/releases/tag/v1.2.7
• https://github.com/chainguard-dev/apko/security/advisories/GHSA-m7hm-vm4x-28jf

osv · GHSA-m7hm-vm4x-28jf

• https://github.com/chainguard-dev/apko/security/advisories/GHSA-m7hm-vm4x-28jf
• https://nvd.nist.gov/vuln/detail/CVE-2026-42576
• https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1
• https://github.com/chainguard-dev/apko
• https://github.com/chainguard-dev/apko/releases/tag/v1.2.7

osv · GO-2026-5497

• https://github.com/chainguard-dev/apko/security/advisories/GHSA-m7hm-vm4x-28jf
• https://nvd.nist.gov/vuln/detail/CVE-2026-42576
• https://github.com/chainguard-dev/apko/commit/6604826b19e36e9bc6e196592800fad93738f4a1
• https://github.com/chainguard-dev/apko/releases/tag/v1.2.7

No related changes are available here.