—
GO-2026-5279
melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses in chainguard.dev/melange
Quick fix
GO-2026-5279 — chainguard.dev/melange: upgrade to the fixed version with the command below.
go get chainguard.dev/melange@v0.43.4Details
melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses in chainguard.dev/melange
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/chainguard.dev/melange
Introduced in:
0.32.0Fixed in: 0.43.4Fix
go get chainguard.dev/melange@v0.43.4