Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: oras Clear
ID Title
CVE-2026-50151 SSRF (Server-Side Request Forgery) in oras.land/oras-go/v2 (CVE-2026-50151)
SSRF in oras.land/oras-go/v2 (CVE-2026-50151). Confidential information can be exposed externally. Exploitable via ``Location``. Mitigation: upgrade to `2.6.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →