Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Filtered by product Osv-scalibr
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-5981 1 Google 1 Osv-scalibr 2025-08-07 N/A 6.5 MEDIUM
Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images.