GHSA-945p-3jhm-6rcp
NoneCVSS
—
EPSS
—
Published
Feb 28, 2026
CISA due date
—
The record
malcontent: Nested archive extraction failure can drop content from scan inputs
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/chainguard-dev/malcontent | 0 | 1.21.0 |
Related vulnerabilities
- CVE-2026-28407 malcontent is software for discovering supply-chain compromises through context… Same vulnerability
- GO-2026-4392 malcontent OCI image pull credential exfiltration via malicious registry token realm in… Also affects github.com/chainguard-dev/malcontent
- GO-2026-4391 malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in… Also affects github.com/chainguard-dev/malcontent
- CVE-2026-24846 malcontent discovers supply-chain compromises through. Also affects github.com/chainguard-dev/malcontent
- CVE-2026-24845 malcontent discovers supply-chain compromises through. Also affects github.com/chainguard-dev/malcontent
- CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
- CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
- CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703