—
GO-2026-5562
melange has Path Traversal via .PKGINFO in --persist-lint-results in chainguard.dev/melange
Details
melange has Path Traversal via .PKGINFO in --persist-lint-results in chainguard.dev/melange
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / chainguard.dev/melange
Introduced in:
0.32.0 Fixed in: 0.43.4 Fix
go get chainguard.dev/melange@v0.43.4