FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · oras-project/oras-java · GitHub

Security

Report a vulnerability

SECURITY.md

Security Policy

Please follow the security policy to report a security vulnerability or concern.

Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory
GHSA-j6hm-v3x2-qv6j published May 27, 2026 by jonesbusy

Low
Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation
GHSA-xm96-gfjx-jcrc published May 13, 2026 by jonesbusy

High

Learn more about advisories related to oras-project/oras-java in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL