Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:09:31 +0000 EUVD-2026-273993 https://cve.radiocsirt.org/vuln/euvd-2026-273993 EUVD-2026-273993 https://cve.radiocsirt.org/vuln/euvd-2026-273993 fkie_cve-2026-28407 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28407 <p>malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Version 1.21.0 fixes the issue.</p> <p>malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Version 1.21.0 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28407 GHSA-945p-3jhm-6rcp — malcontent: Nested archive extraction failure can drop content from scan inputs https://cve.radiocsirt.org/vuln/ghsa-945p-3jhm-6rcp <p><strong>Affected:</strong> Go: github.com/chainguard-dev/malcontent</p> <p>Previously, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes.</p> <p>**Fix**: https://github.com/chainguard-dev/malcontent/pull/1383</p> <p>**Acknowledgements**</p> <p>malcontent thanks Oleh Konko from [1seal](https://1seal.org/) for discovering and reporting this issue.</p> <p><strong>Affected:</strong> Go: github.com/chainguard-dev/malcontent</p> <p>Previously, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes.</p> <p>**Fix**: https://github.com/chainguard-dev/malcontent/pull/1383</p> <p>**Acknowledgements**</p> <p>malcontent thanks Oleh Konko from [1seal](https://1seal.org/) for discovering and reporting this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-945p-3jhm-6rcp