VDB
GO-2026-4392
GO-2026-4392
PUBLISHED
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | chainguard-dev/malcontent | 0 |
| github.com | chainguard-dev/bincapz | 0.10.0 |
Timeline
- Feb 19, 2026 CVE Published
- Feb 19, 2026 CVE Updated
- Oct 14, 2026 Security Advisory