PT-2026-26768 · Syft · Syft

Htrgouvea · Publicado 2026-03-20 · Atualizado 2026-04-01 · CVE-2026-33481

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Syft versions prior to 1.42.3

Description Syft did not properly remove temporary files if temporary storage became full during a scan. This occurred when unpacking archives, specifically with large or highly compressed archives. The issue caused Syft to exit without deleting temporary files, leading to depletion of temporary storage and potentially preventing future Syft runs or other system utilities from functioning correctly.

Recommendations Update to version 1.42.3 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-460

Identificadores relacionados

CLEANSTART-2026-WN01990

CVE-2026-33481

GHSA-RJCW-VG7J-M9RC

GO-2026-4809

SUSE-SU-2026:1135-1

Produtos afetados

Syft

Referências · 216

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33481.json · Exploit
• https://github.com/anchore/syft/security/advisories/GHSA-rjcw-vg7j-m9rc · Aviso do Fabricante
• https://github.com/anchore/syft/pull/4668 · Correção
• https://github.com/anchore/syft/pull/4629 · Correção
• https://github.com/anchore/syft · Nota
• https://github.com/anchore/stereoscope/pull/537 · Correção
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WN01990.json · Nota
• https://osv.dev/vulnerability/ghsa-whqx-f9j3-ch6m · Nota
• https://suse.com/security/cve/CVE-2026-22545 · Nota
• https://suse.com/security/cve/CVE-2026-33281 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-33132 · Nota
• https://suse.com/security/cve/CVE-2026-33191 · Nota
• https://suse.com/security/cve/CVE-2026-33066 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Nota de Segurança