Topic
1 article
CyberSecureToday covers oras-go in a story published 23 Sep 2026.
The coverage includes 1 vulnerability advisory. 1 advisory is rated critical or high severity.
Stories on oras-go most often intersect with ORAS, OCI and Open Container Initiative, with Technology, Cloud & SaaS the most affected sector. The most recent story, “ORAS-Go Symlink Path Traversal Flaw Opens OCI Artifact Supply Chain to Compromise”, was published 23 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
KubernetesA high-severity CVSS 8.8 path traversal vulnerability in oras-go allows malicious OCI container artifacts to escape extraction roots and execute arbitrary code.