MA
Product
malcontent
by chainguard-dev · last CVE Feb 27, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add malcontent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24845
6.5
0%
Jan 29
malcontent's OCI image scanning could expose registry credentials
Affected: >= 0.10.0, < 1.20.3
CVE-2026-28407
5.3
0%
Feb 27
malcontent's nested archive extraction failure can drop content from scan inputs
Affected: < 1.21.0
CVE-2026-24846
5.0
0%
Jan 29
malcontent's archive extraction could write outside extraction directory
Affected: >= 1.8.0, < 1.20.3
Showing 3