Chainguard Melange vulnerabilities
- chainguard melangemelange has Path Traversal via .PKGINFO in --persist-lint-results4.4 Medium
- chainguard melangemelange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses6.1 Medium
- chainguard melangemelange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI4.3 Medium
- chainguard melangemelange has a path traversal in license-path which allows reading files outside workspace5.5 Medium
- chainguard melangemelange affected by potential host command execution via license-check YAML mode patch pipeline7.8 High
- chainguard melangemelange pipeline working-directory could allow command injection7.8 High
- chainguard melangemelange QEMU runner could write files outside workspace directory8.2 High