204 matches found
PT-2026-44919
Summary The pullArtifact methods in Registry and OCILayout use the org.opencontainers.image.title annotation from a pulled manifest as a filename, resolving it against the caller supplied output directory without normalization or a containment check. A manifest publisher can set this annotation t...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, flux, sftpgo-plugin-eventsearch, actions-runner-controller, ingress-nginx-controller, github-mcp-server, tailscale, nova, aws-network-policy-agent, flux-notification-controller, rabbitmq-messaging-topology-operator, clickhouse-operato...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, whereabouts, step-ca, kubernetes-dashboard-metrics-scraper, trivy, rancher-telemetry, spqr, bank-vaults, argo-rollouts, gitness, nfs-subdir-external-provisioner, percona-server-mongodb-operator, crossplane-provider-sql, nerdctl,...
Malicious code in @mipta1/oras (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e55b7cf41df2b60c003da22e479a06fecaeeebd38526d0d3f24ea8521fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2022-0997
Malicious code in bioql PyPI...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, flux, q, actions-runner-controller, cfssl, k3s, src, kaf, nri-discovery-kubernetes, php-fpmexporter, kube-logging-operator, ctop, kubernetes-dashboard-metrics-scraper, render-template, vexctl, direnv, capslock, aws-flb-kinesis, metall...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, flux, q, actions-runner-controller, cfssl, k3s, src, kaf, nri-discovery-kubernetes, php-fpmexporter, kube-logging-operator, ctop, kubernetes-dashboard-metrics-scraper, render-template, vexctl, direnv, capslock, aws-flb-kinesis, metall...
Software Bill of Materials (SBOM) for your Spin Apps
Learn how to generate, scan, and distribute Software Bill of Materials SBOM for Spin applications using trivy and oras...
OPENSUSE-SU-2024:14554-1 oras-1.2.1-1.1 on GA media
These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora: Security Advisory for golang-oras-2 (FEDORA-2023-c9b2182a4e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-oras (FEDORA-2023-c9b2182a4e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-oras-1 (FEDORA-2023-c9b2182a4e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: golang-oras-2-2.0.0~rc.4-1.fc37
ORAS Go library...
[SECURITY] Fedora 37 Update: golang-oras-1-1.2.1-1.fc37
ORAS Go library...
[SECURITY] Fedora 37 Update: golang-oras-0.15.1-1.20221105git690716b.fc37
Work with OCI registries, but for secure supply chain - managing content like artifacts, images, SBOM...
[SECURITY] Fedora 36 Update: golang-oras-2-2.0.0~rc.4-1.fc36
ORAS Go library...
[SECURITY] Fedora 36 Update: golang-oras-1-1.2.1-1.fc36
ORAS Go library...
[SECURITY] Fedora 36 Update: golang-oras-0.15.1-1.20221105git690716b.fc36
Work with OCI registries, but for secure supply chain - managing content like artifacts, images, SBOM...