Linux Distros Unpatched Vulnerability : CVE-2026-50151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a...

SUSE CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: helm-push, kots, manifest-tool, oras, kubescape, argocd-image-updater, conftest, opentofu, tw, rancher-agent, vcluster, helm-set-status, k8ssandra-client, argo-cd, gitness, kube-arangodb, helm-mapkubeapis, kyverno-notation-aws, helm-operator, gatekeeper, consul-k8s,...

CVE-2026-50151

creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:11+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7 2026-07-18 16:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwn4wyzpq23...

PT-2026-54776

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.0 Description During the monolithic blob upload flow, the software follows a registry-controlled Location header and reuses the Authorization header from the initial POST request for the subsequent PUT request. If...