Known vulnerabilities in Google OSV-SCALIBR
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-102252 | A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6… | 6.9 Medium | Sep 29, 2026 |
| CVE-2025-13425 | A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice… | 1.9 Low | Nov 20, 2025 |
| CVE-2025-5981 | Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using… | 5.7 Medium | Jun 18, 2025 |