CVE-2026-24845 malcontent's OCI image scanning could expose registry credentials

malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. malcontent uses...

CVE-2026-24845: Insufficiently Protected Credentials

malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. malcontent uses...

go-containerregistry:fuzz_parse_reference: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4653205454651392 Project: go-containerregistry Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsereference Job Type: libfuzzerasango-containerregistry Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL...

go-containerregistry:fuzz_parse_reference: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5103422691213312 Project: go-containerregistry Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsereference Job Type: libfuzzerasango-containerregistry Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State:...