All products

github.com/chainguard-dev/malcontent

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availabilityGHSA-54P8-X2M9-C593 · GO-2026-4583Version ranges need review. github.com/chainguard-dev/malcontent Go Medium Fix reported
malcontent: Nested archive extraction failure can drop content from scan inputsCVE-2026-28407 · GHSA-945P-3JHM-6RCPVersion ranges need review. github.com/chainguard-dev/malcontent Go Medium Fix reported
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extractionCVE-2026-24846 · GHSA-923J-VRCG-HXWHVersion ranges need review. github.com/chainguard-dev/malcontent Go Medium Fix reported
malcontent OCI image pull credential exfiltration via malicious registry token realmCVE-2026-24845 · GHSA-9M43-P3CX-W8J5Version ranges need review. github.com/chainguard-dev/bincapzgithub.com/chainguard-dev/malcontent Go Medium Fix reported