pool

Feb 2, 2026 GO-2026-4577 +1 more

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 29, 2026 GO-2026-4577 +1 more

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 27, 2026 GO-2026-4577 +1 more

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 26, 2026 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 23, 2026 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 20, 2026 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 8, 2026 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jan 5, 2026 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 31, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 31, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 23, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 12, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 8, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 7, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Dec 5, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 23, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 20, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 18, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 14, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 10, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Nov 7, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Oct 31, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Oct 28, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Oct 26, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Oct 20, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Sep 29, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Sep 24, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Sep 11, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Aug 15, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Aug 4, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jul 7, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jul 2, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jun 27, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jun 27, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type ScannerPool

+ func (sp *ScannerPool) Close()

Jun 10, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jun 6, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Jun 4, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 22, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 22, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 22, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 21, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 12, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

May 1, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Apr 28, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Apr 25, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Apr 21, 2025 GO-2026-4391 +3 more

  GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

  GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

  GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

  GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

+ type BufferPool struct

+ func NewBufferPool() *BufferPool

+ func (bp *BufferPool) Get(size int64) []byte

+ func (bp *BufferPool) Put(buf []byte)

+ type ScannerPool struct

+ func NewScannerPool(yrs *yarax.Rules, count int) *ScannerPool

+ func (sp *ScannerPool) Get() *yarax.Scanner

+ func (sp *ScannerPool) Put(scanner *yarax.Scanner)