Vulnerabilities

TI-2026-22681 CVE-2026-28407 · GHSA-945p-3jhm-6rcp

malcontent's nested archive extraction failure can drop content from scan inputs

LOW 31

malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00411 Published 2026-02-27 Fixed in 1.21.0 CWE-703

TI-2026-20045 CVE-2026-24846 · GHSA-923j-vrcg-hxwh

LOW 24

malcontent discovers supply-chain compromises through.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00187 Published 2026-01-29 Fixed in 1.20.3 CWE-22

TI-2026-20044 CVE-2026-24845 · GHSA-9m43-p3cx-w8j5

LOW 29

malcontent discovers supply-chain compromises through.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00375 Published 2026-01-29 Fixed in 1.20.3 CWE-522