CNNVD-202601-4860 Information
Jan 29, 2026
cve
CNNVD ID
CNNVD-202601-4860
Related CVE
- CNNVD Published: 2026-01-29
Description (Chinese)
malcontent是Chainguard开源的一个供应链攻击检测工具。 malcontent 1.20.3之前版本存在安全漏洞，该漏洞源于扫描特制OCI镜像引用时可能暴露Docker注册表凭据。
Description (English)
Mallcontent is a supply chain attack detection tool for the open source of Chainguard. There was a security loophole in the pre-malcontent 1.20.3 version, which originated from the possibility of exposing Docker ’ s registration form when scanned the special OCI mirror reference.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Chainguard
Published
2026-01-29
Last Modified
2026-02-24
References
https://github.com/chainguard-dev/malcontent/commit/538ed00cdc639d687a4bd1e843a2be0428a3b3e7 https://github.com/chainguard-dev/malcontent/security/advisories/GHSA-9m43-p3cx-w8j5
Patch
https://gitlab.freedesktop.org/pwithnall/malcontent
Share on: