159 matches found
CLEANSTART-2026-RO55124 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-DR73379 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-NW06538 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
ROOT-APP-GOBINARY-CVE-2026-85731 CVE-2026-85731 in oras.land/oras-go/v2 - Patched by Root
Root has patched CVE-2026-85731 in the oras.land/oras-go/v2 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-50151 CVE-2026-50151 in oras.land/oras-go/v2 - Patched by Root
Root has patched CVE-2026-50151 in the oras.land/oras-go/v2 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-50163 CVE-2026-50163 in oras.land/oras-go/v2 - Patched by Root
Root has patched CVE-2026-50163 in the oras.land/oras-go/v2 package for Root:Go. Multiple fixed versions available...
CLEANSTART-2026-PW54184 oras-go is a Go library for managing OCI artifacts
CVE-2026-50163 affects multiple packages. oras-go is a Go library for managing OCI artifacts. See references for individual vulnerability details...
CLEANSTART-2026-WF30790 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-GY88228 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-FH01204 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the kyverno package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-JS28997 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the kyverno package. oras-go is a Go library for managing OCI artifacts...
UBUNTU-CVE-2026-85732
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, th...
UBUNTU-CVE-2026-85731
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, co...
Amazon Linux 2 : soci-snapshotter (ALASDOCKER-2026-143)
The version of soci-snapshotter installed on the remote host is prior to 0.16.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-143 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root...
Medium: soci-snapshotter
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-3153)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3153 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...
Medium: soci-snapshotter
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...