Affected by GO-2025-3767 and 1 other vulnerabilities

GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

clients/

Details

Path	Synopsis
clienttest Package clienttest provides mock servers for testing.	Package clienttest provides mock servers for testing.
datasource Package datasource provides clients to fetch data from different APIs.	Package datasource provides clients to fetch data from different APIs.
internal/pypi Package pypi defines the structures to parse PyPI JSON API response.	Package pypi defines the structures to parse PyPI JSON API response.
resolution Package resolution provides clients required by dependency resolution.	Package resolution provides clients required by dependency resolution.