Affected by GO-2025-3767 and 1 other vulnerabilities

GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

internal/

Details

Path	Synopsis
datasource Package datasource provides clients to fetch data from different APIs.	Package datasource provides clients to fetch data from different APIs.
mavenutil Package mavenutil provides utilities for merging Maven pom/xml.	Package mavenutil provides utilities for merging Maven pom/xml.
resolution
client Package client provides clients required by dependency resolution.	Package client provides clients required by dependency resolution.
clienttest Package clienttest provides mock servers for testing.	Package clienttest provides mock servers for testing.