Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/02/28 2:50 a.m.10 views

malcontent: Nested archive extraction failure can drop content from scan inputs

Previously, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Fix:...

6.9CVSS5.9AI score0.00351EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/27 12:0 a.m.10 views

PT-2026-22408

Name of the Vulnerable Software and Affected Versions malcontent versions prior to 1.21.0 Description malcontent is software used to discover supply-chain compromises through context, differential analysis, and YARA. A logic error exists where the software removes nested archives that fail to...

6.9CVSS7.7AI score0.00351EPSS
SaveExploits0
Rows per page
Query Builder