VDB
GO-2026-4869
GO-2026-4869
PUBLISHED
Unbounded allocation for old GNU sparse in archive/tar
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | yam | *, * |
| wolfi | sbom-convert | *, *, * |
| chainguard | openbao-k8s-fips | *, *, * |
| chainguard | nri-memcached | *, *, * |
| wolfi | supercronic | *, *, * |
| wolfi | litefs | *, *, * |
| wolfi | kubernetes-1.34 | 0, 0, 0 |
| chainguard | mountpoint-s3-csi-driver-2.4 | *, *, * |
| chainguard | tigera-operator-1.41 | 0, 0 |
| chainguard | cadence-fips | *, * |
| chainguard | argo-workflows-fips-3.7 | *, * |
| Go | stdlib | 1.26.0-0, 1.26.0-0, 0 |
| chainguard | aws-ebs-csi-driver-1.53 | *, * |
| wolfi | nuclei | 0, 0, 0 |
| chainguard | trivy | 0, 0 |
| chainguard | ytt-fips | *, * |
| chainguard | rancher-loglevel | *, * |
| chainguard | terraform-mcp-server | *, * |
| wolfi | dkron | *, *, * |
| chainguard | cert-manager-google-cas-issuer-fips | *, * |
…and 2283 more
Timeline
- Apr 7, 2026 CVE Published
- May 15, 2026 CVE Updated