CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: chartmuseum, flux-helm-controller, cilium-cli, trivy-operator, helm-mapkubeapis, steampipe, helm-set-status, argo-cd, zot, flux-source-controller, zarf, opa, headlamp, rancher, linkerd2, gatekeeper, kyverno, falcoctl, k9s, cert-manager-cmctl, kyverno-notation-aws,...

PT-2026-54777

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description A path traversal issue exists in the tar-extraction helper function ensureLinkPath within content/file/utils.go. The function validates that a hardlink target resolves inside the extraction base but...