Jo-Jo98 ciguard
- CVE-2026-44219 ciguard: SCA HTTP client reads response body without size cap 0.3%
- CVE-2026-44218 ciguard: Container image runs as root (no USER directive) 0.1%
- CVE-2026-44220 ciguard: discover_pipeline_files follows symlinks out of scan root 0.2%