Filtered by vendor Google Subscriptions
Filtered by product Osv-scalibr Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-5981 1 Google 1 Osv-scalibr 2025-08-07 6.5 Medium
Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images.