Threats affecting pkg:github/OSV-SCALIBR

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS <0.1%	CVE-2026-102252Google OSV-SCALIBR · Path Traversal Medium6.9EPSS <0.1%2026-09-29CVE Database V5CVE-2026-102252 CVE-2026-102252 is a path traversal vulnerability in Google OSV-SCALIBR's embedded VMDK filesystem extractor versions 0.3.6 through 0.5.0. This flaw allows an attacker controlling the scan target to write arbitrary files outside the intended extraction directory on the host system by exploiting insufficient validation of archive path entries in crafted VMDK images. EPSS <0.1%Vulnerability CWE-22	CVE Database V5	2026-09-29

Page 1 of 1