CVE-2025-5981 — Arbitrary File write in OSV-SCALIBR
Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly,…
Published: 2025-06-18 · CVSS: 5.7 · CVSS 4.0
Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7