Oras (Linuxfoundation) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2026-07-17. Vendor: Linuxfoundation.

CVEs of Oras

• CVE-2026-50151 - CVSS 7.5 (high), 2026-07-17: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a…