MEDIUM5.3Go
GHSA-54p8-x2m9-c593· GO-2026-4583malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability
Modified: 3/23/2026
package
Go/github.com/chainguard-dev/malcontent
pkg:go/github.com/chainguard-dev/malcontent
MEDIUM5.5Go
GHSA-923j-vrcg-hxwh· CVE-2026-24846, GO-2026-4391malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction
Modified: 2/3/2026
MEDIUMGo
GHSA-945p-3jhm-6rcp· CVE-2026-28407, GO-2026-4577malcontent: Nested archive extraction failure can drop content from scan inputs
Modified: 3/23/2026
MEDIUM6.5Go
GHSA-9m43-p3cx-w8j5· CVE-2026-24845, GO-2026-4392malcontent OCI image pull credential exfiltration via malicious registry token realm
Modified: 2/19/2026
—Go
GO-2026-4391· CVE-2026-24846, GHSA-923j-vrcg-hxwhmalcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent
Modified: 3/3/2026
—Go
GO-2026-4392· CVE-2026-24845, GHSA-9m43-p3cx-w8j5malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent
Modified: 2/19/2026
—Go
GO-2026-4577· CVE-2026-28407, GHSA-945p-3jhm-6rcpmalcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent
Modified: 3/23/2026
—Go
GO-2026-4583· GHSA-54p8-x2m9-c593malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent
Modified: 3/23/2026