CLEANSTART-2026-QF24401 Security fixes in helm 4.2.4-r1

Package helm version 4.2.4-r1 fixes 1 vulnerabilities: CVE-2026-50163...

CLEANSTART-2026-IQ94380 Security fixes in argo-cd 3.4.7-r1

Package argo-cd version 3.4.7-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, ghsa-hrxh-6v49-42gf, CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-II53972 Security fixes in argo-cd 3.4.6-r1

Package argo-cd version 3.4.6-r1 fixes 3 vulnerabilities: CVE-2026-71557, CVE-2026-71556, CVE-2026-50163...

CLEANSTART-2026-LO94255 Security fixes in argo-cd 3.3.14-r3

Package argo-cd version 3.3.14-r3 fixes 2 vulnerabilities: CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-VL72619 Security fixes in argo-cd 3.3.13-r0

Package argo-cd version 3.3.13-r0 fixes 3 vulnerabilities: CVE-2026-50163, CVE-2026-71556, CVE-2026-71557...

CLEANSTART-2026-PK78207 Security fixes in tigera-operator 1.40.15-r1

Package tigera-operator version 1.40.15-r1 fixes 1 vulnerabilities: CVE-2026-50163...

CLEANSTART-2026-CB09847 Security fixes in tigera-operator 1.40.14-r1

Package tigera-operator version 1.40.14-r1 fixes 1 vulnerabilities: CVE-2026-50163...

oras-1.3.3-2.1 on GA media (moderate)

oras-1.3.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11297-1 Rating: moderate Cross-References: CVE-2026-50163 CVSS scores: CVE-2026-50163 SUSE : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

SUSE CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: conftest, crossplane, rancher-fleet-fips, grafana-operator, cloudbeat-fips, steampipe, kyverno-fips, rancher-agent, drone, helm-operator-fips, opa, trivy-operator-fips, grafana-operator-fips, ratify, conftest-fips, linkerd2, cilium-cli, argocd-image-updater-fips,...

CVE-2026-50163

creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:07+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp...