oras.land/oras-go vulnerabilities (Go)

1 vulnerability.

• oras.land/oras-go Go oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens CVE-2026-48978 Fix available 2.1 LowJuly 1, 2026