github.com/chainguard-dev/malcontent
#supply #chain #attack #detection
View on Github
Activity
- Latest release
- 6d ago
- Total releases
- 58
- Cadence
- ~8 days
- Last 12 months
- 32
Reach
- Stars
- 675
Details
- First release
- Feb 28, 2024
| Version | Released | |
|---|---|---|
v1.26.0
minor
|
v1.26.0
minor
Dependencies (27)
+ 19 more |
|
v1.25.9
patch
|
v1.25.9
patch
Dependencies (27)
+ 19 more |
|
v1.25.8
patch
|
v1.25.8
patch
Dependencies (27)
+ 19 more |
|
v1.25.7
patch
|
v1.25.7
patch
Dependencies (27)
+ 19 more |
|
v1.25.6
patch
|
v1.25.6
patch
Dependencies (27)
+ 19 more |
|
v1.25.5
patch
|
v1.25.5
patch
Dependencies (27)
+ 19 more |
|
v1.25.4
patch
|
v1.25.4
patch
Dependencies (27)
+ 19 more |
|
v1.25.3
patch
|
v1.25.3
patch
Dependencies (27)
+ 19 more |
|
v1.25.2
patch
|
v1.25.2
patch
Dependencies (27)
+ 19 more |
|
v1.25.1
patch
|
v1.25.1
patch
Dependencies (27)
+ 19 more |
|
v1.25.0
minor
|
v1.25.0
minor
Dependencies (27)
+ 19 more |
|
v1.24.2
minor
|
v1.24.2
minor
Dependencies (27)
+ 19 more |
|
v1.24.1
patch
|
v1.24.1
patch
Dependencies (27)
+ 19 more |
|
v1.24.0
minor
|
v1.24.0
minor
Dependencies (27)
+ 19 more |
|
v1.23.1
patch
|
v1.23.1
patch
Dependencies (27)
+ 19 more |
|
v1.23.0
minor
|
v1.23.0
minor
Dependencies (27)
+ 19 more |
|
v1.22.4
patch
|
v1.22.4
patch
Dependencies (27)
+ 19 more |
|
v1.22.3
patch
|
v1.22.3
patch
Dependencies (27)
+ 19 more |
|
v1.22.2
patch
|
v1.22.2
patch
Dependencies (27)
+ 19 more |
|
v1.22.1
minor
|
v1.22.1
minor
Dependencies (27)
+ 19 more |
|
v1.22.0
minor
|
v1.22.0
minor
Dependencies (27)
+ 19 more |
|
v1.21.6
patch
|
v1.21.6
patch
Dependencies (27)
+ 19 more |
|
v1.21.5
patch
|
v1.21.5
patch
Dependencies (27)
+ 19 more |
|
v1.21.4
patch
|
v1.21.4
patch
Dependencies (27)
+ 19 more |
|
v1.21.3
patch
|
v1.21.3
patch
Dependencies (27)
+ 19 more |
|
v1.21.1
minor
|
v1.21.1
minor
Dependencies (27)
+ 19 more |
|
v1.20.3
minor
2 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.20.3
minor
Dependencies (26)
+ 18 more |
|
v1.19.4
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.19.4
patch
Dependencies (25)
+ 17 more |
|
v1.19.2
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.19.2
minor
Dependencies (25)
+ 17 more |
|
v1.17.1
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.17.1
minor
Dependencies (25)
+ 17 more |
|
v1.16.6
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.6
patch
Dependencies (25)
+ 17 more |
|
v1.16.5
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.5
patch
Dependencies (25)
+ 17 more |
|
v1.16.0
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (25)
+ 17 more |
|
v1.15.0
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (25)
+ 17 more |
|
v1.13.0
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (24)
+ 16 more |
|
v1.12.2
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.12.2
minor
Dependencies (24)
+ 16 more |
|
v1.11.3
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.3
patch
Dependencies (24)
+ 16 more |
|
v1.11.1
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.1
patch
Dependencies (24)
+ 16 more |
|
v1.11.0
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.0
minor
Dependencies (24)
+ 16 more |
|
v1.10.4
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.4
patch
Dependencies (24)
+ 16 more |
|
v1.10.3
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.3
patch
Dependencies (24)
+ 16 more |
|
v1.10.2
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.2
patch
Dependencies (24)
+ 16 more |
|
v1.10.1
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.1
minor
Dependencies (22)
+ 14 more |
|
v1.8.4
patch
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.8.4
patch
Dependencies (22)
+ 14 more |
|
v1.8.1
minor
4 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.8.1
minor
Dependencies (22)
+ 14 more |
|
v1.4.0
minor
3 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (15)
+ 7 more |
|
v1.2.0
minor
3 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (15)
+ 7 more |
|
v1.0.1
major
3 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev |
v1.0.1
major
Dependencies (14)
+ 6 more |
|
v0.16.2
patch
3 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev |
v0.16.2
patch
Dependencies (11)
+ 3 more |
|
v0.16.1
patch
3 CVEs
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev |
v0.16.1
patch
Dependencies (11)
+ 3 more |