ME
Product
Melange
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 1
Watch
Add Melange to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24844 | 8.8 | Feb 4 | melange pipeline working-directory could allow command injection Affected: 0.3.0 through 0.40.5 |
| CVE-2026-24843 | 8.4 | Feb 4 | melange QEMU runner could write files outside workspace directory Affected: 0.11.3 before 0.40.5 |
| CVE-2026-25143 | 7.8 | Feb 4 | melange affected by potential host command execution via license-check YAML mode patch pipeline Affected: 0.10.0 before 0.40.5 |
Showing 3