CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: gitness, kyverno-notation-aws, rancher-agent, ratify, rancher-fleet, headlamp, zarf, oras, opa, argo-cd, helm-mapkubeapis, chartmuseum, opa-envoy, trivy, linkerd2, trivy-operator, flux-source-controller, gatekeeper, kyverno, kube-arangodb, k9s, consul-k8s, cilium-cli...

PT-2026-54777

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description A path traversal issue exists in the tar-extraction helper function ensureLinkPath within content/file/utils.go. The function validates that a hardlink target resolves inside the extraction base but...