CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: kots, zot, helm-mapkubeapis, rancher-agent, kube-arangodb, chartmuseum, gitness, steampipe, opentofu, k9s, ratify, rancher, oras, consul-k8s, flux-source-controller, cluster-api-helm-controller, rancher-helm, opa, cert-manager-cmctl, flux-helm-controller,...

PT-2026-54777

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description A path traversal issue exists in the tar-extraction helper function ensureLinkPath within content/file/utils.go. The function validates that a hardlink target resolves inside the extraction base but...