Approved changes feed: RSS · Atom

cpe:2.3:a:google:osv-scalibr:*:*:*:*:*:go:*:*

part: a version: * update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductOsv Scalibr (de74d42f-f2f7-5972-aa82-ad64a25afb2a)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5981 vulnerable 2026-06-08 07:37:26.199065 Arbitrary File write in OSV-SCALIBR
Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images.
Published: 2025-06-18T08:28:02.899Z
Updated: 2025-06-18T13:42:49.567Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.