oras-project Summary

Latest vulnerabilities published by oras-project

JSON RSS CSV 🔔 Create Alert Trigger

17 July 2026

Cross-Host Credential Exposure in ORAS-Go Library by Oracle
CVE-2026-50151
Oras-projectOras-go7.5HIGH
File Path Traversal in Oras-Go Library Affects OCI Artifact Management
CVE-2026-50162
Oras-projectOras-go6.9MEDIUM
Hardlink Target Validation Flaw in oras-go Library by Oracle
CVE-2026-50163
Oras-projectOras-go7.1HIGH
SSRF Vulnerability in Oras-Go Library from the Open Container Initiative
CVE-2026-48978
Oras-projectOras-go2.1LOW