github.com/chainguard-dev/malcontent
#supply #chain #attack #detection
View on Github
Activity
- Latest release
- 1d ago
- Total releases
- 64
- Cadence
- ~7 days
- Last 12 months
- 36
Reach
- Stars
- 679
Details
- First release
- Feb 28, 2024
| Version | Released | |
|---|---|---|
v1.28.0
minor
|
v1.28.0
minor
Dependencies (25)
+ 17 more |
|
v1.27.1
patch
|
v1.27.1
patch
Dependencies (27)
+ 19 more |
|
v1.27.0
minor
|
v1.27.0
minor
Dependencies (27)
+ 19 more |
|
v1.26.3
patch
|
v1.26.3
patch
Dependencies (27)
+ 19 more |
|
v1.26.2
patch
|
v1.26.2
patch
Dependencies (27)
+ 19 more |
|
v1.26.1
patch
|
v1.26.1
patch
Dependencies (27)
+ 19 more |
|
v1.26.0
minor
|
v1.26.0
minor
Dependencies (27)
+ 19 more |
|
v1.25.9
patch
|
v1.25.9
patch
Dependencies (27)
+ 19 more |
|
v1.25.8
patch
|
v1.25.8
patch
Dependencies (27)
+ 19 more |
|
v1.25.7
patch
|
v1.25.7
patch
Dependencies (27)
+ 19 more |
|
v1.25.6
patch
|
v1.25.6
patch
Dependencies (27)
+ 19 more |
|
v1.25.5
patch
|
v1.25.5
patch
Dependencies (27)
+ 19 more |
|
v1.25.4
patch
|
v1.25.4
patch
Dependencies (27)
+ 19 more |
|
v1.25.3
patch
|
v1.25.3
patch
Dependencies (27)
+ 19 more |
|
v1.25.2
patch
|
v1.25.2
patch
Dependencies (27)
+ 19 more |
|
v1.25.1
patch
|
v1.25.1
patch
Dependencies (27)
+ 19 more |
|
v1.25.0
minor
|
v1.25.0
minor
Dependencies (27)
+ 19 more |
|
v1.24.2
minor
|
v1.24.2
minor
Dependencies (27)
+ 19 more |
|
v1.24.1
patch
|
v1.24.1
patch
Dependencies (27)
+ 19 more |
|
v1.24.0
minor
|
v1.24.0
minor
Dependencies (27)
+ 19 more |
|
v1.23.1
patch
|
v1.23.1
patch
Dependencies (27)
+ 19 more |
|
v1.23.0
minor
|
v1.23.0
minor
Dependencies (27)
+ 19 more |
|
v1.22.4
patch
|
v1.22.4
patch
Dependencies (27)
+ 19 more |
|
v1.22.3
patch
|
v1.22.3
patch
Dependencies (27)
+ 19 more |
|
v1.22.2
patch
|
v1.22.2
patch
Dependencies (27)
+ 19 more |
|
v1.22.1
minor
|
v1.22.1
minor
Dependencies (27)
+ 19 more |
|
v1.22.0
minor
|
v1.22.0
minor
Dependencies (27)
+ 19 more |
|
v1.21.6
patch
|
v1.21.6
patch
Dependencies (27)
+ 19 more |
|
v1.21.5
patch
|
v1.21.5
patch
Dependencies (27)
+ 19 more |
|
v1.21.4
patch
|
v1.21.4
patch
Dependencies (27)
+ 19 more |
|
v1.21.3
patch
|
v1.21.3
patch
Dependencies (27)
+ 19 more |
|
v1.21.1
minor
|
v1.21.1
minor
Dependencies (27)
+ 19 more |
|
v1.20.3
minor
2 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.20.3
minor
Dependencies (26)
+ 18 more |
|
v1.19.4
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.19.4
patch
Dependencies (25)
+ 17 more |
|
v1.19.2
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.19.2
minor
Dependencies (25)
+ 17 more |
|
v1.17.1
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.17.1
minor
Dependencies (25)
+ 17 more |
|
v1.16.6
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.6
patch
Dependencies (25)
+ 17 more |
|
v1.16.5
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.5
patch
Dependencies (25)
+ 17 more |
|
v1.16.0
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (25)
+ 17 more |
|
v1.15.0
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (25)
+ 17 more |
|
v1.13.0
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (24)
+ 16 more |
|
v1.12.2
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.12.2
minor
Dependencies (24)
+ 16 more |
|
v1.11.3
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.3
patch
Dependencies (24)
+ 16 more |
|
v1.11.1
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.1
patch
Dependencies (24)
+ 16 more |
|
v1.11.0
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.0
minor
Dependencies (24)
+ 16 more |
|
v1.10.4
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.4
patch
Dependencies (24)
+ 16 more |
|
v1.10.3
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.3
patch
Dependencies (24)
+ 16 more |
|
v1.10.2
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.2
patch
Dependencies (24)
+ 16 more |
|
v1.10.1
minor
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.1
minor
Dependencies (22)
+ 14 more |
|
v1.8.4
patch
4 CVEs
CVE-2026-28407
GO-2026-4577
GHSA-945p-3jhm-6rcp
Mar 10, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References Updated Mar 23, 2026 · Source: OSV.dev
GO-2026-4583
GHSA-54p8-x2m9-c593
Mar 10, 2026
malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent Fixed in
1.21.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-24845
GO-2026-4392
GHSA-9m43-p3cx-w8j5
Feb 19, 2026
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References Updated Feb 19, 2026 · Source: OSV.dev
CVE-2026-24846
GO-2026-4391
GHSA-923j-vrcg-hxwh
Feb 02, 2026
malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent Fixed in
1.20.3
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.8.4
patch
Dependencies (22)
+ 14 more |