chainguard-dev/malcontent Security Advisories | GitStock

medium2026-03-02

malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability

GHSA-54p8-x2m9-c593

medium2026-02-28

CVE-2026-28407-malcontent: Nested archive extraction failure can drop content from scan inputs

GHSA-945p-3jhm-6rcp

medium2026-01-29

CVE-2026-24846-malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction

GHSA-923j-vrcg-hxwh

medium2026-01-29

CVE-2026-24845-malcontent OCI image pull credential exfiltration via malicious registry token realm

GHSA-9m43-p3cx-w8j5