VDB
GO-2026-4588
GO-2026-4588
PUBLISHED
`melange update-cache` has unbounded HTTP download that can exhaust disk in CI in chainguard.dev/melange
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard.dev | melange | 0, 0 |
Timeline
- Mar 10, 2026 CVE Published
- Mar 23, 2026 CVE Updated