Affected by GO-2025-3767 and 1 other vulnerabilities

GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

resolution/

Details

Path	Synopsis
client Package client provides clients required by dependency resolution.	Package client provides clients required by dependency resolution.
clienttest Package clienttest provides mock servers for testing.	Package clienttest provides mock servers for testing.