—
GO-2026-5562
melange has Path Traversal via .PKGINFO in --persist-lint-results in chainguard.dev/melange
Quick fix
GO-2026-5562 — chainguard.dev/melange: upgrade to the fixed version with the command below.
go get chainguard.dev/melange@v0.43.4Details
melange has Path Traversal via .PKGINFO in --persist-lint-results in chainguard.dev/melange
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/chainguard.dev/melange
Introduced in:
0.32.0Fixed in: 0.43.4Fix
go get chainguard.dev/melange@v0.43.4