malcontent

package

Go to main page

Versions in this module

v1

v1.21.5

Mar 20, 2026

v1.21.4

Mar 20, 2026

v1.21.3

Mar 11, 2026

v1.21.2

Mar 8, 2026

v1.21.1

Feb 24, 2026

v1.21.0

Feb 23, 2026

Changes in this version

type Config

+ MaxDepth int

+ MaxImageSize int64

+ MaxScanFiles int

v1.20.5

Feb 2, 2026 GO-2026-4577 +1 more

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.20.4

Jan 29, 2026 GO-2026-4577 +1 more

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.20.3

Jan 27, 2026 GO-2026-4577 +1 more

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ OCIAuth bool

v1.20.2

Jan 26, 2026 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.20.1

Jan 23, 2026 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.20.0

Jan 20, 2026 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.19.4

Jan 8, 2026 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.19.3

Jan 5, 2026 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.19.2

Dec 31, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.19.1

Dec 31, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ Sensitivity int

v1.19.0

Dec 23, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ Report bool

+ type ScanResult struct

+ FileReports map[string]*FileReport

v1.18.3

Dec 12, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.18.2

Dec 8, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.18.1

Dec 7, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.18.0

Dec 5, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ ScoreAll bool

v1.17.5

Nov 23, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.17.4

Nov 20, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.17.3

Nov 18, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.17.2

Nov 14, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.17.1

Nov 10, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.17.0

Nov 7, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.6

Oct 31, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.5

Oct 28, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.4

Oct 26, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.3

Oct 20, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.2

Sep 29, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.1

Sep 24, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.16.0

Sep 11, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.15.1

Aug 15, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.15.0

Aug 4, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.14.1

Jul 7, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.14.0

Jul 2, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.13.1

Jun 27, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.13.0

Jun 27, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.12.2

Jun 10, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.12.1

Jun 6, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.12.0

Jun 4, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ ExitExtraction bool

v1.11.3

May 22, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.11.2

May 22, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.11.1

May 22, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.11.0

May 21, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.10.4

May 12, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.10.3

May 1, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.10.2

Apr 28, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.10.1

Apr 25, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.10.0

Apr 21, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.9.0

Mar 28, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.8

Mar 10, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.7

Feb 4, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.6

Jan 27, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.5

Jan 22, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.4

Jan 21, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.3

Jan 17, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.2

Jan 15, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ MaxScanners int

v1.8.1

Jan 15, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.8.0

Jan 14, 2025 GO-2026-4391 +3 more

GO-2026-4391: malcontent vulnerable to symlink Path Traversal via handleSymlink argument confusion in archive extraction in github.com/chainguard-dev/malcontent

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ ScannerPool *ScannerPool

+ type ScannerPool struct

+ func NewScannerPool(rules *yarax.Rules, maxScanners int) (*ScannerPool, error)

+ func (p *ScannerPool) Cleanup()

+ func (p *ScannerPool) Get() (*yarax.Scanner, error)

+ func (p *ScannerPool) Put(scanner *yarax.Scanner)

+ func (p *ScannerPool) Stats() (int32, int32)

v1.7.1

Dec 18, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.7.0

Dec 18, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.6.0

Dec 12, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Renderer

+ Name func() string

v1.5.1

Nov 19, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.5.0

Nov 18, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Config

+ ExitFirstHit bool

+ ExitFirstMiss bool

+ TrimPrefixes []string

type FileReport

+ ArchiveRoot string

+ FullPath string

+ PreviousPath string

v1.4.0

Nov 8, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.3.0

Oct 24, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.2.0

Oct 15, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Behavior

+ Override string

type Config

+ FileRiskChange bool

+ FileRiskIncrease bool

+ RuleFS []fs.FS

type FileReport

+ Overrides []*Behavior

type Renderer

+ Scanning func(context.Context, string)

v1.1.1

Oct 3, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

type Behavior

+ RuleName string

type Config

+ Processes bool

v1.0.1

Sep 23, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

v1.0.0

Sep 23, 2024 GO-2026-4392 +2 more

GO-2026-4392: malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent

GO-2026-4577: malcontent: Nested archive extraction failure can drop content from scan inputs in github.com/chainguard-dev/malcontent

GO-2026-4583: malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability in github.com/chainguard-dev/malcontent

Changes in this version

+ type Behavior struct

+ Description string

+ DiffAdded bool

+ DiffRemoved bool

+ ID string

+ MatchStrings []string

+ ReferenceURL string

+ RiskLevel string

+ RiskScore int

+ RuleAuthor string

+ RuleAuthorURL string

+ RuleLicense string

+ RuleLicenseURL string

+ RuleURL string

+ type CombinedReport struct

+ Added string

+ AddedFR *FileReport

+ Removed string

+ RemovedFR *FileReport

+ Score float64

+ type Config struct

+ Concurrency int

+ ErrFirstHit bool

+ ErrFirstMiss bool

+ IgnoreSelf bool

+ IgnoreTags []string

+ IncludeDataFiles bool

+ MinFileRisk int

+ MinRisk int

+ OCI bool

+ Output io.Writer

+ QuantityIncreasesRisk bool

+ Renderer Renderer

+ Rules *yara.Rules

+ Scan bool

+ ScanPaths []string

+ Stats bool

+ type DiffReport struct

+ Added *orderedmap.OrderedMap[string, *FileReport]

+ Modified *orderedmap.OrderedMap[string, *FileReport]

+ Removed *orderedmap.OrderedMap[string, *FileReport]

+ type FileReport struct

+ Behaviors []*Behavior

+ Capabilities []string

+ Error string

+ FilteredBehaviors int

+ IsMalcontent bool

+ Meta map[string]string

+ Path string

+ Pledge []string

+ PreviousRelPath string

+ PreviousRelPathScore float64

+ PreviousRiskLevel string

+ PreviousRiskScore int

+ RiskLevel string

+ RiskScore int

+ SHA256 string

+ Size int64

+ Skipped string

+ Syscalls []string

+ type IntMetric struct

+ Count int

+ Key int

+ Total int

+ Value float64

+ type Renderer interface

+ File func(context.Context, *FileReport) error

+ Full func(context.Context, *Report) error

+ type Report struct

+ Diff *DiffReport

+ Files *orderedmap.OrderedMap[string, *FileReport]

+ Filter string

+ type StrMetric struct

+ Count int

+ Key string

+ Total int

+ Value float64

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL