oras-project Oras Vulnerabilities

Oras-project Oras vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

25 August 2026

Memory Growth Vulnerability in ORAS CLI by Oracle
CVE-2026-55588
Oras-projectOras6.5MEDIUM

17 July 2026

Cross-Host Credential Exposure in ORAS-Go Library by Oracle
CVE-2026-50151
Oras-projectOras-go7.5HIGH
File Path Traversal in Oras-Go Library Affects OCI Artifact Management
CVE-2026-50162
Oras-projectOras-go6.9MEDIUM
Hardlink Target Validation Flaw in oras-go Library by Oracle
CVE-2026-50163
Oras-projectOras-go7.1HIGH
SSRF Vulnerability in Oras-Go Library from the Open Container Initiative
CVE-2026-48978
Oras-projectOras-go2.1LOW