Threat Intel

v0.1

← CVEs

CVE-2026-28407

MED 5.3
Published
2026-02-27
Last Modified
2026-03-03
Affected Apps
4
Affected Devices
6
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Version 1.21.0 fixes the issue.
References 3