Chainguard

Malcontent

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-28407

  • EPSS 0.04%
  • Veröffentlicht 27.02.2026 21:28:06
  • Zuletzt bearbeitet 03.03.2026 18:23:37

malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content...

5

CVE-2026-24846

  • EPSS 0.01%
  • Veröffentlicht 29.01.2026 21:12:18
  • Zuletzt bearbeitet 24.02.2026 19:51:41

malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.3, malcontent could be made to create symlinks outside the intended extraction directory when scannin...

6.5

CVE-2026-24845

  • EPSS 0.03%
  • Veröffentlicht 29.01.2026 21:02:24
  • Zuletzt bearbeitet 20.02.2026 20:24:15

malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted ...