CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: zot, gogatekeeper, zarf, argo-cd, steampipe, headlamp, argocd-image-updater, rancher-fleet, k8ssandra-client, cilium-cli, rancher-agent, trivy-operator, helm-operator, opa-envoy, opa, tigera-operator, consul-k8s, helm, conftest, chartmuseum, gatekeeper, trivy, oras,...

PT-2026-54777

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description A path traversal issue exists in the tar-extraction helper function ensureLinkPath within content/file/utils.go. The function validates that a hardlink target resolves inside the extraction base but...