PT-2026-78232

Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make image rs::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs, t...