Products: 1
Vulnerabilities: 6
Known Exploited: 0
0
Critical Level Threats
3
High Level Threats
2
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-85731
oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
Last Modified: Sep 18, 2026
Published: Sep 16, 2026
CVE-2026-85732
oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing
Last Modified: Sep 18, 2026
Published: Sep 16, 2026
CVE-2026-48978
oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens
Last Modified: Jul 27, 2026
Published: Jul 01, 2026
CVE-2026-50162
oras-go: file store write outside workingDir via symlink traversal
Last Modified: Jul 27, 2026
Published: Jul 01, 2026
CVE-2026-50163
oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction
Last Modified: Jul 27, 2026
Published: Jul 01, 2026
Items Per Page
