ME
Product
Melange
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 1
Watch
Add Melange to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29050 | 6.1 | Apr 23 | melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses Affected: 0.32.0 before 0.43.4 |
| CVE-2026-25145 | 5.5 | Feb 4 | melange has a path traversal in license-path which allows reading files outside workspace Affected: 0.14.0 before 0.40.5 |
| CVE-2026-29049 | 4.3 | Mar 6 | melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI Affected: through 0.40.5 |
Showing 3