chainguard-dev malcontent

• CVE-2026-28407 Medium 6.9 malcontent's nested archive extraction failure can drop content from scan inputs 0.4%
• CVE-2026-24846 Medium 5.5 malcontent's archive extraction could write outside extraction directory 0.2%
• CVE-2026-24845 Medium 6.5 malcontent's OCI image scanning could expose registry credentials 0.4%